Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qm22-h7gg-wr34

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

EPSS

Процентиль: 86%
0.02781
Низкий

8.1 High

CVSS3

Дефекты

CWE-125
CWE-200

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 5.6
redhat
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
nvd
около 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
debian
около 9 лет назад

An exploitable memory corruption vulnerability exists in the handling ...

EPSS

Процентиль: 86%
0.02781
Низкий

8.1 High

CVSS3

Дефекты

CWE-125
CWE-200