Arbitrary Code Execution

pidgin is vulnerable to arbitrary code execution attacks. The vulnerability exists through a buffer overflow issue in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2014-3695: Improper Restriction of Operations within the Bounds of a Memory Buffer

markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service application crash via a large length value in an emoticon response...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

PT-2013-2205

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to a buffer overflow in the http.c file within the MXit protocol plugin in libpurple. This allows remote servers to execute arbitrary code via a long HTTP header. Recommendations...

CVE-2013-0272: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271: Undefined Security Weakness

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

PT-2013-2204

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue allows remote attackers to create or overwrite files via a crafted pathname, specifically in the MXit protocol plugin in libpurple. Recommendations For versions prior to 2.10.7, update to...

DSA-2509-1 pidgin - remote code execution

Bulletin has no description...

CVE-2012-3374: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...