CVE-2016-2375

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact information sent from the server can result in memory disclosure...

CVE-2016-2377

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the...

CVE-2016-2380

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead to a...

CVE-2016-2365

CVE-2016-2365 describes a denial-of-service in Pidgin via the MXIT protocol. The vulnerability stems from how specially crafted MXIT data is processed, potentially causing a null pointer dereference and a crash when received from a malicious server or via network interception. Affected software: ...

CVE-2016-2367

CVE-2016-2367 affects Pidgin (MXIT handling). It describes an information leak/out-of-bounds read triggered by an invalid avatar size, which could cause DoS or memory data exposure if the avatar is shared. The connected documents reiterate this CVE in various Nessus/EulerOS notes but do not provi...

CVE-2016-2372

CVE-2016-2372 concerns an information leak/out-of-bounds read in Pidgin due to MXIT protocol handling. Specifically, a malicious party can send an invalid file-transfer size, potentially triggering an out-of-bounds read that may cause a denial of service or allow copying memory contents to a file...

CVE-2016-2375

CVE-2016-2375 affects Pidgin via an out-of-bounds read in MXIT handling that can disclose memory contents. The connected references confirm this CVE is tied to Pidgin’s MXIT processing and memory disclosure. No specific patch version or remediation details are provided in the supplied documents; ...

CVE-2016-2377

CVE-2016-2377 concerns a buffer overflow in the MXIT protocol handling in Pidgin. Specifically, specially crafted MXIT data or a server response with a negative content-length can trigger an out-of-bounds write of one byte, potentially enabling memory corruption. The available connected documents...

CVE-2016-2376

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...

CVE-2016-2376

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...

CVE-2016-2366

Pidgin is affected by CVE-2016-2366 and related MXIT protocol issues in libpurple, where specially crafted MXIT data from a server or attacker can trigger out-of-bounds reads/writes in Pidgin’s MXIT handling, potentially crashing or memory-corrupting the application. The connected Nessus/EulerOS ...

CVE-2016-2373

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious server or user can send an invalid mood to trigger this vulnerability...

CVE-2016-2371

An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution...

CVE-2016-2375

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact information sent from the server can result in memory disclosure...

CVE-2016-2376

CVE-2016-2376 — Pidgin MXIT buffer overflow : A vulnerability in the MXIT protocol handling in Pidgin could be triggered by specially crafted MXIT data from a server, potentially causing arbitrary code execution due to a buffer overflow. The initial description notes an invalid packet size as the...

CVE-2016-2378

A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the server could potentially result in a buffer overflow, potentially resulting in memory corruption. A malicious server or an unfiltered malicious user can send negative length...

CVE-2016-2377

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the...

CVE-2016-2374

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution...

CVE-2016-2369

A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a denial of service vulnerability. A malicious server can send a packet starting with a NULL byte triggering the vulnerabilit...

CVE-2016-2372

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious user, server, or man-in-the-middle attacker can send an invalid size for a file transfer which will trigger an...