CVE-2016-2374

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin

published January 6, 2017

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03216 · 88.0th percentile
Published
2017-01-06T21:00Z
EPSS history
Timeline
  • 06 JAN 21:00Z
    An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin
    cvelistv5