Lucene search

K
cve[email protected]CVE-2012-3374
HistoryJul 07, 2012 - 10:21 a.m.

CVE-2012-3374

2012-07-0710:21:00
CWE-119
web.nvd.nist.gov
31
cve-2012-3374
buffer overflow
libpurple
mxit
pidgin
remote code execution
nvd

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.26 Low

EPSS

Percentile

96.7%

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.26 Low

EPSS

Percentile

96.7%