CVE-2015-8833 Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitr...
CriticalCVSS 9.8
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pidgin-otr(Debian:12) | < 4.0.2-1 | 4.0.2-1 |
| debian/pidgin-otr(Debian:13) | < 4.0.2-1 | 4.0.2-1 |
| cypherpunks pidgin-otr | <= 4.0.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-8833 vendor-advisory
- SUSE-SU-2016:0912 vendor-advisory
- openSUSE-SU-2016:0878 vendor-advisory
- DSA-3528 vendor-advisory
- [oss-security] 20160309 Re: Heap use after free in Pidgin-OTR plugin mailing-list
- [oss-security] 20160309 Heap use after free in Pidgin-OTR plugin mailing-list
- 84295 vdb-entry
- blog.fuzzing-project.org
- bugs.otr.im
- bugs.otr.im
- bugs.otr.im
- [OTR-users] 20160309 New releases of libotr (4.1.1) and pidgin-otr (4.0.2) available mailing-list
- GLSA-201701-10 vendor-advisory