CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.

Date published : 2013-02-16

http://hg.pidgin.im/pidgin/main/rev/a8aef1d340f2

http://www.pidgin.im/news/security/?id=65