Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libpurpleUpgrade pidgin | Dec 10, 2025 | Oct 24, 2014 |
| Suse | — | Upgrade libpurple-branding-upstreamUpgrade pidgin-develUpgrade libpurple-langUpgrade finch-develUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidginUpgrade finchUpgrade libpurple-meanwhileUpgrade libpurpleUpgrade libpurple-plugin-sametime | Dec 18, 2015 | Oct 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub