CVE-2013-0272
CVE-2013-0272
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
EPSS 2.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
- http://www.ubuntu.com/usn/USN-1746-1
- http://hg.pidgin.im/pidgin/main/rev/879db2a9a59c
- http://www.securityfocus.com/bid/57951
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html
- http://www.pidgin.im/news/security/?id=66
- https://nvd.nist.gov/vuln/detail/CVE-2013-0272