[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdC-5hQvEN0aYqGBNWGvbh9Yu6c5aJepdsr0U7kp620M":3,"g5a-risk:CVE-2017-2640":174},{"success":4,"data":5,"meta":172},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":15,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":80,"references":81,"referencesCount":105,"weaknesses":106,"weaknessesCount":115,"isActivelyExploited":116,"cisaInfo":15,"otxData":15,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":170,"notableEvents":171},"CVE-2017-2640","What is CVE-2017-2640?","An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.","An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to cra...","2018-07-27T18:29:00.97","2019-10-09T23:27:00.633",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":24,"UserInteraction":35,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED",7.5,1.6,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":26,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",10,6.4,0.06179,[46,46,46,46,46,46,46],"Critical",[50,54,59,64,67,71,74,77],{"vendor":51,"product":51,"version":52,"criteria":53,"vulnerable":4},"pidgin","*","cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"redhat","enterprise_linux_desktop","7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":60,"product":65,"version":62,"criteria":66,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":60,"product":68,"version":69,"criteria":70,"vulnerable":4},"enterprise_linux_server_aus","7.4","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",{"vendor":60,"product":72,"version":69,"criteria":73,"vulnerable":4},"enterprise_linux_server_eus","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",{"vendor":60,"product":72,"version":75,"criteria":76,"vulnerable":4},"7.5","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",{"vendor":60,"product":78,"version":62,"criteria":79,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",8,[82,88,92,97,101],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F96775","Securityfocus",[86,87],"Third Party Advisory","VDB Entry",{"url":89,"source":90,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1854","Red Hat",[86],{"url":93,"source":90,"tags":94},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-2640",[95,96,86],"Issue Tracking","Patch",{"url":98,"source":99,"tags":100},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201706-10","Gentoo",[86],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-3806","Debian",[86],5,[107],{"id":108,"name":109,"description":110,"extendedDescription":111,"status":112,"abstraction":113,"structure":114},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2017-2640? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2640, a critical severity cyber security vulnerability from 2018. An out-of-bounds write flaw was found in the way Pidgin ...","CVE-2017-2640, CVE-2017-2640 vulnerability, CVE-2017-2640 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, pidgin security, debian security, redhat security, pidgin vulnerability, debian_linux vulnerability, enterprise_linux_desktop vulnerability, enterprise_linux_server vulnerability, enterprise_linux_server_aus vulnerability","\u002Fwhat-is\u002Fcve-2017-2640",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":10,"dateModified":11,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2640","Cybersecurity","CVE-2017-2640, CVE-2017-2640 vulnerability, CVE-2017-2640 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144,152],{"Operator":15,"Negate":15,"Nodes":145},[146],{"Operator":147,"Negate":15,"CPEMatch":148},"OR",[149],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":151,"VersionEndIncluding":15},"F1D52019-18B7-49AB-B932-DDCD34F7C0EA","2.12.0",{"Operator":15,"Negate":15,"Nodes":153},[154],{"Operator":147,"Negate":15,"CPEMatch":155},[156,158,160,162,164,166,168],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D99A687E-EAE6-417E-A88E-D0082BC194CD",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[],{"lastModified":11,"cacheTime":173,"version":41},1792361801454,{"score":175,"band":176,"action":177,"scoredAt":178},55,"Medium","Plan remediation","2026-10-16T06:44:39.031886+00:00"]