CVE-2015-8833

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 4.0.2

Description The issue is related to a use-after-free vulnerability in the create smp dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin. This vulnerability allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.

Recommendations For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider disabling the create smp dialog function until a patch is available. Restrict access to the "Authenticate buddy" menu item to minimize the risk of exploitation.