CVE-2016-2365: Null Pointer Dereference
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data to trigger this vulnerability and cause a crash.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2365?
CVE-2016-2365 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2016-2365?
To fix CVE-2016-2365, users should upgrade to a patched version of Pidgin that addresses this vulnerability.
What software is affected by CVE-2016-2365?
CVE-2016-2365 affects Pidgin versions up to and including 2.10.12 and certain Ubuntu and Debian Linux distributions.
Can CVE-2016-2365 be exploited remotely?
Yes, CVE-2016-2365 can be exploited by a malicious server or an attacker intercepting network traffic.
What are the potential consequences of CVE-2016-2365?
Exploitation of CVE-2016-2365 may cause a null pointer dereference, leading to a denial of service condition.