CVE-2013-0272
Pidgin < 2.10.7 - Remote Code Execution via Long HTTP Header in MXit Protocol Plugin
Title source: llmDescription
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
References (8)
Core 8
Core References
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1746-1
Various Sources x_refsource_confirm
http://hg.pidgin.im/pidgin/main/rev/879db2a9a59c
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/57951
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html
Vendor Advisory x_refsource_confirm
http://www.pidgin.im/news/security/?id=66
Scores
EPSS
0.0286
EPSS Percentile
85.1%
Details
CWE
CWE-119
Status
published
Products (50)
pidgin/pidgin
2.0.0
pidgin/pidgin
2.0.1
pidgin/pidgin
2.0.2
pidgin/pidgin
2.1.0
pidgin/pidgin
2.1.1
pidgin/pidgin
2.2.0
pidgin/pidgin
2.2.1
pidgin/pidgin
2.2.2
pidgin/pidgin
2.3.0
pidgin/pidgin
2.3.1
... and 40 more
Published
Feb 16, 2013
Tracked Since
Feb 18, 2026