CVE-2016-2374
HighSummary
A memory corruption vulnerability exists in Pidgin's handling of the MXIT protocol. A specially crafted MXIT MultiMX message sent via the server can lead to an out-of-bounds write, resulting in memory disclosure and code execution.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive information and allow an attacker to execute code remotely, posing a serious security threat to the system.
Recommendation
It is recommended to update Pidgin to the latest version that includes fixes for this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Pidgin
See all- CVE-2016-2378High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted data sent via the server could lead to a buffer overflow, potentially resulting in memory corruption.
- CVE-2016-2377High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could lead to an out-of-bounds write.
- CVE-2016-2376High
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution.
- CVE-2016-2371High
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
- CVE-2016-2368High
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.
Original NVD description (English source)
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.