CVE-2013-0272
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows...
6.8 MediumFix available
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
Exploit likelihood
2.86%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- Updated
- 2026-11-02
EUVDEUVD-2013-0298 No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
EUVD-2013-0298- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xc58-69j7-pj34 No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows...
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
GHSA-xc58-69j7-pj34- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
CVE-2013-0272- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0272 No score
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
- Record
DEBIAN-CVE-2013-0272- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10432-1 No score
finch-2.11.0-4.1 on GA media
These are all security issues fixed in the finch-2.11.0-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10432-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pidginDebian:12 |
before 2.10.6-3 | 2.10.6-3 |
pidginDebian:13 |
before 2.10.6-3 | 2.10.6-3 |
pidginDebian:14 |
before 2.10.6-3 | 2.10.6-3 |
finchRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
finch-develRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurpleRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-develRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-perlRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurple-tclRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidginRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pidgin-debuginfoRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidgin-develRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
pidgin-perlRed Hat:rhel_productivity:5 |
before 0:2.6.6-17.el5_9.1 | 0:2.6.6-17.el5_9.1 |
libpurpleRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::client |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurpleRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::server |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurpleRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidginRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finchRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
finch-develRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-develRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-perlRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
libpurple-tclRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-develRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-docsRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
pidgin-perlRed Hat:enterprise_linux:6::workstation |
before 0:2.7.9-10.el6_4.1 | 0:2.7.9-10.el6_4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0272 is a medium vulnerability (CVSS 6.8) in Pidgin, published February 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. Fixed in pidgin 2.10.6-3.
References
lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
ubuntu.com/usn/USN-1746-1
hg.pidgin.im/pidgin/main/rev/879db2a9a59c
securityfocus.com/bid/57951
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474
Show 60 moreShow less
pidgin.im/news/security?id=66
nvd.nist.gov/vuln/detail/CVE-2013-0272
github.com/advisories/GHSA-xc58-69j7-pj34
security-tracker.debian.org/tracker/CVE-2013-0272
access.redhat.com/errata/RHSA-2013:0646
bugzilla.redhat.com/show_bug.cgi?id=910040
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0646.json
cve.org/CVERecord?id=CVE-2013-0272
suse.com/security/cve/CVE-2009-2694