description: An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.
problem types: out-of-bounds write
affected:
{
product: Pidgin
vendor: Pidgin
versions:
status: affected, version: 2.10.11
}