gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Suse | — | Upgrade xfce4-settings-branding-basedonopensuseUpgrade gcin-branding-basedonopensuseUpgrade libpurple-langUpgrade ksplashx-branding-basedonopensuseUpgrade gfxboot-branding-basedonopensuseUpgrade finch-develUpgrade leechcraft-aggregatorUpgrade MozillaFirefox-branding-basedonopensuseUpgrade pidgin-birthday-reminderUpgrade midori-branding-basedonopensuseUpgrade leechcraft-lmpUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-popishuUpgrade leechcraft-azoth-hiliUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-blogiqueUpgrade pidgin-guificationsUpgrade leechcraft-vgrabberUpgrade libgarcon-branding-basedonopensuseUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade leechcraft-poshukuUpgrade leechcraft-monocle-pdfUpgrade leechcraft-azoth-shxUpgrade libpurple-meanwhileUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-touchstreamsUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-azoth-chathistoryUpgrade purple-plugin-pack-langUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-vroobyUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade libpurple-plugin-skype-langUpgrade leechcraft-dolozheeUpgrade telepathy-plugin-sipeUpgrade pidgin-advanced-sound-notificationUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-historyholderUpgrade pidgin-birthday-reminder-langUpgrade bot-sentryUpgrade leechcraft-azoth-keesoUpgrade pidginUpgrade purple-plugin-packUpgrade leechcraft-secman-simplestorageUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-poshuku-autosearchUpgrade gtk2-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-blogique-hestiaUpgrade lxde-common-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-monocle-seenUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-shaitanUpgrade pidgin-plugin-embeddedvideoUpgrade ksplash-qml-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade e17-branding-basedonopensuseUpgrade leechcraft-poshuku-fuaUpgrade pidgin-plugin-guificationsUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-advancednotificationsUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-syncerUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-deadlyricsUpgrade install-initrd-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade leechcraft-netstoremanagerUpgrade leechcraft-gactsUpgrade leechcraft-gmailnotifierUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade pidgin-sipeUpgrade libpurple-plugin-mrimUpgrade libxfce4ui-branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade xfce4-splash-branding-basedonopensuseUpgrade pidgin-mrimUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade leechcraft-lemonUpgrade leechcraft-tabslistUpgrade leechcraft-networkmonitorUpgrade leechcraft-liznooUpgrade leechcraft-azoth-isteriqueUpgrade pidgin-embeddedvideoUpgrade leechcraft-azoth-xtazyUpgrade pidgin-guifications-langUpgrade leechcraft-azoth-p100qUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-sb2Upgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade leechcraft-secmanUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-azoth-vaderUpgrade yast2-qt-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-cstpUpgrade PackageKit-branding-basedonopensuseUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-azoth-depesterUpgrade libpurple-branding-openSUSEUpgrade libpurple-develUpgrade leechcraft-monocle-muUpgrade leechcraft-kbswitchUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-hotstreamsUpgrade branding-basedonopensuseUpgrade finchUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-azoth-xooxUpgrade leechcraft-auscrieUpgrade leechcraft-monocle-docUpgrade leechcraft-kinotifyUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-monocle-postrusUpgrade leechcraft-glanceUpgrade leechcraft-pintabUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-lmp-dumbsyncUpgrade skype4pidginUpgrade leechcraft-otlozhuUpgrade leechcraft-azoth-embedmediaUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-dumbeepUpgrade leechcraft-poshuku-fatapeUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-dbusmanagerUpgrade wallpaper-branding-basedonopensuseUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-docUpgrade pidgin-develUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-azoth-otroidUpgrade leechcraft-lhtrUpgrade leechcraft-aggregator-bodyfetchUpgrade gdm-branding-basedonopensuseUpgrade libpurple-plugin-skypeUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-azoth-juickUpgrade sle-sdk-releaseUpgrade leechcraftUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-monocleUpgrade pidgin-otrUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-summaryUpgrade leechcraft-tpiUpgrade leechcraft-launchyUpgrade leechcraft-develUpgrade leechcraft-hotsensorsUpgrade libpurple-plugin-openfetionUpgrade leechcraft-anheroUpgrade leechcraft-lackmanUpgrade leechcraft-xproxyUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-shellopenUpgrade pidgin-plugin-skypeUpgrade leechcraft-seekthruUpgrade leechcraft-pogooglueUpgrade leechcraft-lmp-mp3tunesUpgrade gio-branding-basedonopensuseUpgrade libpurple-plugin-openfetion-langUpgrade libpurple-plugin-bot-sentry-langUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-newlifeUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-knowhowUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-azoth-zheetUpgrade libpurpleUpgrade leechcraft-azothUpgrade pidgin-facebookchatUpgrade leechcraft-lmp-graffitiUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarksUpgrade plymouth-branding-basedonopensuseUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade libpurple-plugin-sipeUpgrade telepathy-hazeUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-lastfmscrobbleUpgrade libpurple-plugin-pack-extrasUpgrade systemd-presets-branding-basedonopensuseUpgrade libpurple-tclUpgrade susegreeter-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-monocle-fxb | Mar 3, 2014 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub