CVE-2016-4323

A directory traversal exists in the handling of the MXIT protocol in Pidgin

published January 6, 2017

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image triggering the vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02296 · 83.1th percentile
Published
2017-01-06T21:00Z
EPSS history
Timeline
  • 06 JAN 21:00Z
    A directory traversal exists in the handling of the MXIT protocol in Pidgin
    cvelistv5