CVE-2016-2380
CVE-2016-2380
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
06 ene 2017Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead to a potential out-of-bounds read.
Productos afectados
Pidgin · Pidgin¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →