CVE-2013-0271
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to...
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
Exploit likelihood
What each source reports
NVD Score used
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
CVE-2013-0271- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
CVE-2013-0271- Updated
- 2026-11-02
EUVDEUVD-2013-0297 No score
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
EUVD-2013-0297- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8m9-xh4h-fpfm No score
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to...
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
GHSA-q8m9-xh4h-fpfm- Updated
- 2026-11-02
OSV No score
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
CVE-2013-0271- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0271 No score
The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
- Record
DEBIAN-CVE-2013-0271- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10432-1 No score
finch-2.11.0-4.1 on GA media
These are all security issues fixed in the finch-2.11.0-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10432-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0271 is a medium vulnerability (CVSS 5.0) in Pidgin, published February 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in pidgin 2.10.6-3.
References
lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
ubuntu.com/usn/USN-1746-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18386
hg.pidgin.im/pidgin/main/rev/a8aef1d340f2
pidgin.im/news/security?id=65
Show 42 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-0271
github.com/advisories/GHSA-q8m9-xh4h-fpfm
security-tracker.debian.org/tracker/CVE-2013-0271
suse.com/security/cve/CVE-2009-2694