Pidgin MXit Message Parsing Buffer Overflow Vulnerability (Windows) Network Vulnerability

Summary

This host has installed with Pidgin and is prone to buffer overflow vulnerability.

Impact

Successful exploitation will allow attacker to cause a stack-based buffer overflow via a specially crafted RX message which may lead to the execution of arbitrary code in the context of the application or to denial-of-service. Impact Level: System/Application

Solution

Upgrade to Pidgin version 2.10.5 or later, For updates refer to http://pidgin.im/download

Insight

A boundary error within the 'mxit_show_message()' function, when parsing incoming instant messages containing inline images.

Affected

Pidgin version prior to 2.10.5 on Windows

References