The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 16, 2013 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 16, 2013 |
| Freebsd | — | Upgrade libpurple | Dec 10, 2025 | Mar 10, 2013 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 16, 2013 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 16, 2013 |
| Suse | — | Upgrade pidginUpgrade libpurple-tclUpgrade libpurple-meanwhileUpgrade libpurple-tcl-debuginfoUpgrade pidgin-evolutionUpgrade libpurple-debuginfoUpgrade finch-debuginfoUpgrade finchUpgrade libpurple-branding-upstreamUpgrade libpurple-develUpgrade pidgin-evolution-debuginfoUpgrade libpurple-meanwhile-debuginfoUpgrade pidgin-debuginfoUpgrade finch-develUpgrade libpurple-langUpgrade sle-sdk-releaseUpgrade pidgin-debugsourceUpgrade pidgin-develUpgrade libpurple | Feb 17, 2015 | Feb 16, 2013 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub