ZeroHour

CVE-2016-2365

CVSS 3.0
5.9 medium
EPSS
2%p83
Published
()
Modified
Description

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data to trigger this vulnerability and cause a crash.

Vendors
pidgincanonicaldebian
Products
pidgin, ubuntu linux, debian linux
Weakness
CWE-476
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news