CVE-2013-0272 Memory corruption in n/a
Remote servers can execute arbitrary code on Pidgin clients via a buffer overflow in the MXit protocol plugin's HTTP header handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-0272?
CVE-2013-0272 is a medium-severity memory corruption vulnerability in Pidgin Pidgin, published on 16 Feb 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
Weakness: CWE-119
Which versions are affected by CVE-2013-0272?
It affects 1 product.
Products include Pidgin Pidgin.
How do I fix CVE-2013-0272?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2013-0272 being exploited?
There is no known exploitation of CVE-2013-0272 in the wild and no public exploit code.
Other vulnerabilities in Pidgin Pidgin
Sources
Also known as DEBIAN-CVE-2013-0272, GHSA-xc58-69j7-pj34.