Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qm22-h7gg-wr34

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

EPSS

Процентиль: 87%
0.03228
Низкий

8.1 High

CVSS3

Дефекты

CWE-125
CWE-200

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 5.6
redhat
около 10 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
nvd
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
debian
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling ...

EPSS

Процентиль: 87%
0.03228
Низкий

8.1 High

CVSS3

Дефекты

CWE-125
CWE-200