Denial of Service Vulnerability in Pidgin's MXIT Protocol Handling

CVE-2016-2370 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an out-of-bounds read. A malicious server or man-in-the-middle attacker can send invalid data to trigger this vulnerability.

Learn more about our Cis Benchmark Audit For Server Software.