CVE-2016-2368
HighSummary
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.
Risk Assessment
The organization may be exposed to malicious code execution or sensitive data disclosure, which could lead to serious security consequences.
Recommendation
It is recommended to update Pidgin to the latest version to mitigate these vulnerabilities and to monitor MXIT traffic for potential attacks.
Other vulnerabilities in Pidgin
See all- CVE-2016-2378High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted data sent via the server could lead to a buffer overflow, potentially resulting in memory corruption.
- CVE-2016-2377High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could lead to an out-of-bounds write.
- CVE-2016-2376High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution.
- CVE-2016-2374High
A memory corruption vulnerability exists in Pidgin's handling of the MXIT protocol. A specially crafted MXIT MultiMX message sent via the server can lead to an out-of-bounds write, resulting in memory disclosure and code execution.
- CVE-2016-2371High
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
Original NVD description (English source)
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.