Remote Code Execution (RCE)

libpurple.so is vulnerable to remote code execution RCE. The vulnerability exists when an attacker sends a malicious MXIT data through the sever, causing out-of-bounds write and eventually leading to remote code execution...

Denial Of Service (DoS)

libpurple.so is vulnerable to denial of serviceDoS. Due to a flaw in MXIT protocol in Pidgin, when a malicious user or sever sends a malicious MXIT data, it leverages to out-of-bounds read causing an application crash...