CVE-2017-2640

NONE EPSS 92.7%

Published Jul 27, 20187y ago · Modified Jun 17, 20262w ago

Published Jul 27, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.

Threat Intelligence

EPSS Exploit Probability

92.7% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 8

Vendor	Product	Version	Range
pidgin	pidgin	*	<2.12.0
debian	debian_linux	8.0	any
redhat	enterprise_linux_desktop	7.0	any
redhat	enterprise_linux_server	7.0	any
redhat	enterprise_linux_server_aus	7.4	any
redhat	enterprise_linux_server_eus	7.4	any
redhat	enterprise_linux_server_eus	7.5	any
redhat	enterprise_linux_workstation	7.0	any

References 5

securityfocus.com http://www.securityfocus.com/bid/96775

Third Party AdvisoryVDB Entry
access.redhat.com https://access.redhat.com/errata/RHSA-2017:1854

Third Party Advisory
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2640

Issue TrackingPatchThird Party Advisory
security.gentoo.org https://security.gentoo.org/glsa/201706-10

Third Party Advisory
debian.org https://www.debian.org/security/2017/dsa-3806

Third Party Advisory

Remediation

bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2640

Issue TrackingPatchThird Party Advisory