Pidgin Security Advisory
| Title | Pidgin MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities |
|---|---|
| Date | 2016-06-21 |
| CVE Name | CVE 2016-2368 |
| Discovered By | Yves Younan of Cisco Talos |
| Description | Data is copied without verifying that it was copied successfully. (TALOS-CAN-0136) |
| Fixed in Revision | 60f95045db42 f6efc254e947 |
| Fixed in Version | 2.11.0 |
| Fix | Separate the handling of HTTP headers and body. Check the return value from g_vsnprintf(). |
