Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidgin-perlUpgrade libpurple-perlUpgrade pidgin-docsUpgrade finch-develUpgrade pidgin-develUpgrade libpurple-tclUpgrade pidginUpgrade finchUpgrade libpurpleUpgrade libpurple-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-perlUpgrade libpurpleUpgrade libpurple-tclUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-develUpgrade pidgin-docsUpgrade pidginUpgrade libpurple-develUpgrade finch | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurpleUpgrade finch-develUpgrade libpurple-langUpgrade sle-sdk-releaseUpgrade libpurple-tclUpgrade pidgin-develUpgrade libpurple-meanwhileUpgrade libpurple-develUpgrade finchUpgrade pidgin | May 29, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub