CVE-2012-3374
CVE-2012-3374
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.
EPSS 6.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00009.html
- http://www.pidgin.im/news/security/index.php?id=64
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17678
- http://secunia.com/advisories/50005
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:105
- http://rhn.redhat.com/errata/RHSA-2012-1102.html
- http://hg.pidgin.im/pidgin/main/rev/ded93865ef42
- https://nvd.nist.gov/vuln/detail/CVE-2012-3374