Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-2374

Опубликовано: 06 янв. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.1

Описание

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

РелизСтатусПримечание
devel

released

1:2.10.12-0ubuntu6
esm-apps-legacy/xenial

released

1:2.10.12-0ubuntu5.1
esm-apps/xenial

released

1:2.10.12-0ubuntu5.1
esm-infra-legacy/trusty

released

1:2.10.9-0ubuntu3.3
precise

released

1:2.10.3-0ubuntu1.7
trusty

released

1:2.10.9-0ubuntu3.3
trusty/esm

released

1:2.10.9-0ubuntu3.3
upstream

released

2.11.0-1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

Показывать по

EPSS

Процентиль: 87%
0.03228
Низкий

6.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 5.6
redhat
около 10 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
nvd
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS3: 8.1
debian
больше 9 лет назад

An exploitable memory corruption vulnerability exists in the handling ...

CVSS3: 8.1
github
больше 4 лет назад

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

EPSS

Процентиль: 87%
0.03228
Низкий

6.8 Medium

CVSS2

8.1 High

CVSS3