PT-2016-5146

CVE-2016-2377

·

تاريخ النشر

2016-06-23

·

تاريخ التحديث

2017-03-30

الوصف من

CVSS 3.1
8.1
عالية
المقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Pidgin (affected versions not specified)
Description A buffer overflow issue exists in Pidgin's handling of the MXIT protocol. This can be triggered by specially crafted MXIT data from a server, potentially leading to an out-of-bounds write. A malicious server can exploit this by sending a negative content-length in response to an HTTP request.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2016-1727
DLA-542-1
DSA-3620-1
MGASA-2016-0236
USN-3031-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾