CVE-2013-0272
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows...
6.8 MediumFix available
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
Exploit likelihood
2.86%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- Updated
- 2026-11-02
EUVDEUVD-2013-0298No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
EUVD-2013-0298- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xc58-69j7-pj34No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows...
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
GHSA-xc58-69j7-pj34- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0272No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
DEBIAN-CVE-2013-0272- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10432-1No score
finch-2.11.0-4.1 on GA media
These are all security issues fixed in the finch-2.11.0-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10432-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pidginDebian:12 | before 2.10.6-3 | 2.10.6-3 |
pidginDebian:13 | before 2.10.6-3 | 2.10.6-3 |
pidginDebian:14 | before 2.10.6-3 | 2.10.6-3 |
finchRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
finch-develRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurpleRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-develRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-perlRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-tclRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidginRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pidgin-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidgin-develRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidgin-perlRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs | before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurpleRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurpleRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurpleRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs | before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0272 is a medium vulnerability (CVSS 6.8) in Pidgin, published February 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. Fixed in pidgin 2.10.6-3.
References
lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
ubuntu.com/usn/USN-1746-1
hg.pidgin.im/pidgin/main/rev/879db2a9a59c
securityfocus.com/bid/57951
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474
Show 60 moreShow less
pidgin.im/news/security?id=66
nvd.nist.gov/vuln/detail/CVE-2013-0272
github.com/advisories/GHSA-xc58-69j7-pj34
security-tracker.debian.org/tracker/CVE-2013-0272
access.redhat.com/errata/RHSA-2013:0646
bugzilla.redhat.com/show_bug.cgi?id=910040
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0646.json
cve.org/CVERecord?id=CVE-2013-0272
suse.com/security/cve/CVE-2009-2694