pidgin-otr 'log_message_cb()' Function Format String Vulnerability
16 Jun. 2012
Summary
pidgin-otr is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.
Vulnerable Systems:
* OTR Development Team pidgin-otr 3.2.0
ImmuneSystems:
* OTR Development Team pidgin-otr 3.2.1
An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in a denial-of-service condition.
Vendor Status:
OTR Development Team had issued an update for this vulnerability
