ZeroHour

CVE-2016-2376

CVSS 3.0
8.1 high
EPSS
4%p89
Published
()
Modified
Description

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.

Vendors
pidgincanonicaldebian
Products
pidgin, ubuntu linux, debian linux
Weakness
CWE-119
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news