CVE-2016-2377

CVE-2016-2377 describes a buffer overflow vulnerability in Pidgin's handling of the MXIT protocol, affecting various Pidgin and Linux distributions. A malicious server could exploit this by sending specially crafted MXIT data with a negative content-length, leading to an out-of-bounds write of a single byte. This high-severity flaw (CVSS 8.1) allows for potential remote code execution with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no known active exploitation, public exploit code, or Metasploit modules, but it has garnered some community discussion and media coverage.