CVE:CVE-2017-2640
CNNVD:CNNVD-201703-483
Pidgin是一款跨平台的实时通信客户端，它支持多个常用的实时通信协议，用户可用同一个软件登录不同的实时通信服务。
Pidgin 2.12.0之前版本中XML内容处理的方式存在越界写入漏洞。远程攻击者可借助恶意的远程服务器利用该漏洞造成Pidgin崩溃或在Pidgin进程的上下文中执行任意代码。
solution:Upgrade pidgin pidgin to a higher version than 2.12.0,and avoid the version (,2.12.0); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0