CVE-2016-4323: Path Traversal
A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image triggering the vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4323?
CVE-2016-4323 has a moderate severity rating due to its potential to allow file overwrites through directory traversal.
How do I fix CVE-2016-4323?
To fix CVE-2016-4323, you should update Pidgin to a version above 2.10.12 or apply patches provided by your operating system's vendor.
What does CVE-2016-4323 affect?
CVE-2016-4323 affects Pidgin versions up to 2.10.12 and specific versions of Ubuntu and Debian operating systems.
What type of attack does CVE-2016-4323 involve?
CVE-2016-4323 involves a directory traversal attack that can be exploited through specially crafted MXIT protocol data.
Can a malicious server exploit CVE-2016-4323?
Yes, a malicious server or an adversary with access to the network traffic can exploit CVE-2016-4323 by sending invalid filenames.