CVE-2012-3374

EPSS 4.7%

pidgin - remote code execution

Published: 7/7/2012Modified: 4/28/2026

Also known as:DEBIAN-CVE-2012-3374

Description

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.

Affected packages (2)

Debian/pidginfrom 0, < 2.10.6-1
Debian/pidginfrom 0, < 2.7.3-1+squeeze3

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-3374