An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "finch" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "finch-dbgsym" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "finch-dev" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "libpurple-bin" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "libpurple-dev" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "libpurple0" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "libpurple0-dbgsym" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "pidgin" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "pidgin-data" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "pidgin-dbg" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "pidgin-dbgsym" }, { "binary_version": "1:2.10.9-0ubuntu3.3", "binary_name": "pidgin-dev" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "finch" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "finch-dbgsym" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "finch-dev" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "libpurple-bin" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "libpurple-dev" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "libpurple-dev-dbgsym" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "libpurple0" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "libpurple0-dbgsym" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "pidgin" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "pidgin-data" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "pidgin-dbg" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "pidgin-dbgsym" }, { "binary_version": "1:2.10.12-0ubuntu5.1", "binary_name": "pidgin-dev" } ] }