Vulnerabilities > Pidgin > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-03-29 | CVE-2016-2379 | Inadequate Encryption Strength vulnerability in Pidgin Mxit The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords. | 8.8 |
2017-01-06 | CVE-2016-2378 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. | 8.1 |
2017-01-06 | CVE-2016-2377 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. | 8.1 |
2017-01-06 | CVE-2016-2376 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. | 8.1 |
2017-01-06 | CVE-2016-2374 | Out-of-bounds Read vulnerability in multiple products An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. | 8.1 |
2017-01-06 | CVE-2016-2371 | Out-of-bounds Write vulnerability in multiple products An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. | 8.1 |
2017-01-06 | CVE-2016-2368 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. | 8.1 |
2010-01-09 | CVE-2010-0013 | Path Traversal vulnerability in multiple products Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. | 7.5 |