Description
Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message.
References (4)
Scores
EPSS
0.0203
EPSS Percentile
83.9%
Details
CWE
CWE-134
Status
published
Products (1)
cypherpunks/pidgin-otr
< 3.2.0
Published
May 23, 2012
Tracked Since
Feb 18, 2026