Pidgin Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

2.5.0	34
2.5.2	34
2.5.1	32
2.4.3	30
2.0.0	30

Remediation

Official Fix	98
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

Exploitability

High	0
Functional	0
Proof-of-Concept	18
Unproven	14
Not Defined	72

Access Vector

Not Defined	0
Physical	0
Local	12
Adjacent	0
Network	92

Authentication

Not Defined	0
High	0
Low	24
None	80

User Interaction

Not Defined	0
Required	0
None	104

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	14
≤6	32
≤7	14
≤8	24
≤9	0
≤10	18

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	22
≤6	24
≤7	28
≤8	8
≤9	6
≤10	12

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	6
≤6	38
≤7	10
≤8	24
≤9	0
≤10	18

NVD

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	14
≤7	0
≤8	0
≤9	14
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	26
<2k	22
<5k	54
<10k	0
<25k	0
<50k	2
<100k	0
≥100k	0

Exploit Today

<1k	104
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (70): 0.1, 0.1.2, 0.2, 0.2.1, 2, 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.2, 2.2.1, 2.2.2, 2.3, 2.3.1, 2.4, 2.4.1, 2.4.2, 2.4.3, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.6, 2.6.1, 2.6.2, 2.6.4, 2.6.5, 2.6.6, 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.8, 2.9, 2.10, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.10.6, 2.10.7, 2.10.8, 2.10.9, 2.11, 2.14, 2.14.1, 2.14.2, 2.14.3, 2.14.4, 2.14.5, 2.14.6, 2.14.7, 2.14.8, 3.2, 4, 4.0.1

Software Type: Messaging Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
06/03/2022	5.6	5.4	Pidgin DNS Response certificate validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-26491
11/20/2019	4.4	4.0	Pidgin dbus cleartext transmission	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02	CVE-2012-1257
03/29/2017	7.2	6.9	Pidgin MXIT inadequate encryption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2379
03/15/2017	9.8	9.0	Pidgin out-of-bounds write	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-2640
01/06/2017	5.1	5.0	Pidgin MXIT Protocol path traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-4323
01/06/2017	5.2	5.1	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2380
01/06/2017	7.7	7.5	Pidgin MXIT Protocol memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2378
01/06/2017	7.7	7.5	Pidgin MXIT Protocol memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2377
01/06/2017	7.7	7.5	Pidgin MXIT Protocol memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2376
01/06/2017	6.3	6.2	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2375
01/06/2017	7.7	7.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2374
01/06/2017	5.6	5.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2373
01/06/2017	6.6	6.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2372
01/06/2017	7.7	7.5	Pidgin MXIT Protocol out-of-bounds write	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2371
01/06/2017	5.6	5.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2370
01/06/2017	5.6	5.5	Pidgin MXIT Protocol null pointer dereference	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2369
01/06/2017	7.7	7.5	Pidgin MXIT Protocol memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2368
01/06/2017	6.6	6.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2367
01/06/2017	5.6	5.5	Pidgin MXIT Protocol out-of-bounds	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2366
01/06/2017	5.6	5.5	Pidgin MXIT Protocol null pointer dereference	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2365
06/21/2016	3.3	3.2	Pidgin MXIT Suggested Contacts Memory information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2375
06/21/2016	6.7	6.6	Pidgin MXIT MultiMX Message memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2374
06/21/2016	4.6	4.5	Pidgin MXIT Contact Mood denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2016-2373
06/21/2016	4.6	4.5	Pidgin MXIT File Transfer Memory information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2372
06/21/2016	6.7	6.6	Pidgin MXIT Extended Profiles memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2371