CVE-2016-2378: Buffer Overflow
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the server could potentially result in a buffer overflow, potentially resulting in memory corruption. A malicious server or an unfiltered malicious user can send negative length values to trigger this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2378?
CVE-2016-2378 is classified as a high-severity buffer overflow vulnerability.
How do I fix CVE-2016-2378?
To fix CVE-2016-2378, update Pidgin to version 2.10.13 or later, or apply the relevant patches from your operating system vendor.
What software is affected by CVE-2016-2378?
CVE-2016-2378 affects Pidgin versions up to 2.10.12, and specific versions of Ubuntu and Debian Linux.
What type of vulnerability is CVE-2016-2378?
CVE-2016-2378 is a buffer overflow vulnerability that can lead to memory corruption.
Can CVE-2016-2378 be exploited remotely?
Yes, CVE-2016-2378 can be exploited by sending specially crafted data from a malicious server.