CVEvulnerability
CVE-2016-2371
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
Affected configurations
• pidgin pidgin (<= 2.10.12)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.10
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.debian.org/security/2016/dsa-3620 Third Party Advisory
- http://www.pidgin.im/news/security/?id=104 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91335 Third Party Advisory, VDB Entry
- http://www.talosintelligence.com/reports/TALOS-2016-0139/ Technical Description, Third Party Advisory
- http://www.ubuntu.com/usn/USN-3031-1 Third Party Advisory
- https://security.gentoo.org/glsa/201701-38 security.gentoo.org
- http://www.debian.org/security/2016/dsa-3620 Third Party Advisory
- http://www.pidgin.im/news/security/?id=104 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91335 Third Party Advisory, VDB Entry
- http://www.talosintelligence.com/reports/TALOS-2016-0139/ Technical Description, Third Party Advisory
- http://www.ubuntu.com/usn/USN-3031-1 Third Party Advisory
- https://security.gentoo.org/glsa/201701-38 security.gentoo.org