NVD

Id
28867  
Name
CVE-2015-8833  
Description
Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-12-02  
Seq
2015-8833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152104 28867 CVE-2015-8833 SUSE-SU-2016:0912  View
152105 28867 CVE-2015-8833 openSUSE-SU-2016:0878  View
152106 28867 CVE-2015-8833 DSA-3528  View
152107 28867 CVE-2015-8833 [oss-security] 20160309 Re: Heap use after free in Pidgin-OTR plugin  View
152108 28867 CVE-2015-8833 [oss-security] 20160309 Heap use after free in Pidgin-OTR plugin  View
152109 28867 CVE-2015-8833 84295  View
152110 28867 CVE-2015-8833 https://blog.fuzzing-project.org/39-Heap-use-after-free-in-Pidgin-OTR-plugin-CVE-2015-8833.html  View
152111 28867 CVE-2015-8833 https://bugs.otr.im/issues/128  View
152112 28867 CVE-2015-8833 https://bugs.otr.im/issues/88  View
152113 28867 CVE-2015-8833 https://bugs.otr.im/projects/pidgin-otr/repository/revisions/aaf551b9dd5cbba8c4abaa3d4dc7ead860efef94  View
152114 28867 CVE-2015-8833 [OTR-users] 20160309 New releases of libotr (4.1.1) and pidgin-otr (4.0.2) available  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1289 JVNDB-2016-002062 Pidgin 用 OTR pidgin-otr プラグインの gtk-dialog.c の create_smp_dialog 関数における任意のコードを実行される脆弱性 Pidgin 用 Off-the-Record Messaging (OTR) pidgin-otr プラグインの gtk-dialog.c の create_smp_dialog 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-8833 86058 CVE-2015-8833 28867 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002062.html 2016-03-09 2016-04-18 View