cve-2016-2371-00

Summary Pidgin MXIT Extended Profiles Code Execution Vulnerability
Date 2016-06-21
CVE Number CVE-2016-2371
Talos Report ID TALOS-2016-0139
Discovered By Yves Younan of Cisco Talos
Fixed In Release 2.11.0

Description

A malicious server or man-in-the-middle could trigger a crash or potentially arbitrary code execution.

Mitigation

Check the field count before accessing fields.

Looking to reach us via XMPP? Check out the new PidginChat service!