VDB
GCVE-110-MAGEIA-2017-102
GCVE-110-MAGEIA-2017-102
Advisory Published
A server controlled by an attacker can send an invalid XML that can
trigger an out-of-bound memory access. This might lead to a crash or, in
some extreme cases, to remote code execution in the client-side
(CVE-2017-2640).
The pidgin package has been updated to version 2.12.0, which fixes this
issue and other bugs, including certificate validation for the Google Talk
protocol. It also removes protocol plugins for services that are no longer
available or supported. See the upstream ChangeLog for details.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | pidgin | 2.12.0-1.mga5 (unaffected), 0 (affected), 2.12.0-1.mga5 (unaffected), 0 (affected) | — |
| Mageia | musique | 0 (affected), 1.5-1.1.mga6 (unaffected) | — |
Aliases
References
Browse GCVE Records
6,043 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.