Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2640

Опубликовано: 27 июл. 2018
Источник: nvd
CVSS3: 7.5
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*
Версия до 2.12.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 76%
0.01003
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.

CVSS3: 7.5
redhat
больше 8 лет назад

An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.

CVSS3: 7.5
debian
больше 7 лет назад

An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 ...

suse-cvrf
больше 8 лет назад

Security update for pidgin

suse-cvrf
больше 8 лет назад

Security update for pidgin

EPSS

Процентиль: 76%
0.01003
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787
CWE-787