Vulnerabilities (CVE)

Filtered by vendor Cypherpunks Subscribe
Filtered by product Pidgin-otr
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-8833 1 Cypherpunks 1 Pidgin-otr 2024-02-04 10.0 HIGH 9.8 CRITICAL
Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.
CVE-2012-2369 2 Cypherpunks, Pidgin 2 Pidgin-otr, Pidgin 2024-02-04 7.5 HIGH N/A
Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message.