CVE-2016-2376

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...

CVE-2016-4323

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image...

CVE-2016-2375

CVE-2016-2375 affects Pidgin via an out-of-bounds read in MXIT handling that can disclose memory contents. The connected references confirm this CVE is tied to Pidgin’s MXIT processing and memory disclosure. No specific patch version or remediation details are provided in the supplied documents; ...

CVE-2016-2379

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to 1 decrypt hashed passwords by leveraging knowledge of client registration codes or 2 gain login access by eavesdropping on login messages and re-using the hashed passwords...

Debian DSA-3620-1 : pidgin - security update

Yves Younan of Cisco Talos discovered several vulnerabilities in the MXit protocol support in pidgin, a multi-protocol instant messaging client. A remote attacker can take advantage of these flaws to cause a denial of service application crash, overwrite files, information disclosure, or...

DSA-3620-1 pidgin - security update

Bulletin has no description...

Ubuntu 14.04 LTS : Pidgin vulnerabilities (USN-3031-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3031-1 advisory. Yves Younan discovered that Pidgin contained multiple issues in the MXit protocol support. A remote attacker could use this issue to cause Pidgin to cras...

USN-3031-1 pidgin vulnerabilities

Yves Younan discovered that Pidgin contained multiple issues in the MXit protocol support. A remote attacker could use this issue to cause Pidgin to crash, resulting in a denial of service, or possibly execute arbitrary code...

MGASA-2016-0236 Updated pidgin packages fix security vulnerability

A buffer overflows vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...

Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04339)

Pidgin is a cross-platform real-time communication client. A buffer overflow vulnerability exists in the MXIT protocol processing of Pidgin version 2.10.11, which can be exploited by an attacker to cause an out-of-bounds read with the help of specially crafted MXIT data...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04334)

Pidgin is a cross-platform real-time communication client. A denial of service vulnerability exists in the MXIT protocol processing of Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service null pointer reverse reference by sending invalid data...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04336)

Pidgin is a cross-platform real-time communication client. A denial of service vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service null pointer backreference by sending packets starting with a null byte...

Pidgin MXIT Protocol Directory Traversal Vulnerability

Pidgin is a cross-platform real-time communication client. A directory traversal vulnerability exists in the MXIT protocol handling of Pidgin version 2.10.11, which can be exploited by an attacker to overwrite a file by providing an invalid boot image name...

Pidgin MXIT Protocol Memory Corruption Vulnerability (CNVD-2016-04333)

Pidgin is a cross-platform real-time communication client. A memory corruption vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a buffer overflow, execute arbitrary code, or cause a memory leak by sending specially...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04337)

Pidgin is a cross-platform real-time communication client. A denial-of-service vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service read across boundaries by sending invalid data...

Pidgin MXIT Protocol Memory Corruption Vulnerability (CNVD-2016-04341)

Pidgin is a cross-platform real-time communication client. A security vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause out-of-bounds writes and memory corruption, or execute arbitrary code by sending specially crafted...

Pidgin MXIT Protocol Information Disclosure Vulnerability (CNVD-2016-04331)

Pidgin is a cross-platform real-time communication client. An information disclosure vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service read across boundaries or copy memory to a file with the help of ...

Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04340)

Pidgin is a cross-platform real-time communication client. A buffer overflow vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a buffer overflow and memory corruption with the help of a negative length value...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04335)

Pidgin is a cross-platform real-time communication client. A denial-of-service vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service read across boundaries by sending invalid data...

Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04347)

Pidgin is a cross-platform real-time communication client that supports several popular real-time communication protocols. A buffer overflow vulnerability exists in Pidgin's MXIT protocol processing, which allows remote attackers to exploit the vulnerability to send a negative-length HTTP respons...