CVE-2016-2371
HIGHPidgin < 2.10.12 - Out-of-bounds Write in MXIT Protocol Handler
Title source: llmDescription
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/91335
Patch, Vendor Advisory x_refsource_confirm
http://www.pidgin.im/news/security/?id=104
Technical Description, Third Party Advisory x_refsource_misc
http://www.talosintelligence.com/reports/TALOS-2016-0139/
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2016/dsa-3620
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201701-38
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-3031-1
Scores
CVSS v3
8.1
EPSS
0.0317
EPSS Percentile
86.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (6)
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
15.10
debian/debian_linux
8.0
pidgin/pidgin
< 2.10.12
Pidgin/Pidgin
2.10.11
Published
Jan 06, 2017
Tracked Since
Feb 18, 2026