VRT-2013-1002 (CVE-2013-6489): Buffer overflow in MXit emoticon parsing
Cisco Talos documented a buffer overflow in Pidgin 2.10.7's MXit emoticon parsing, where the asn_getUtf8 function reads a one-byte length into a signed integer, so a value of 0xFF is interpreted as -1. The g_malloc call with that length overflows, and...