VRT-2013-1003 (CVE-2013-6486): Pidgin uses clickable links to untrusted executables
Sourcefire's VRT-2013-1003 describes a remote code execution flaw in Pidgin 2.10.7's handling of file:// URLs on Windows, where a URL delivered over any Pidgin-supported protocol is passed to ShellExecute() when clicked. The file_clicked_cb function strips...