The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Aug 30, 2017 | Mar 15, 2012 |
| Centos_linux | — | Upgrade finchUpgrade libpurple-tclUpgrade finch-develUpgrade libpurpleUpgrade pidgin-perlUpgrade libpurple-perlUpgrade pidgin-develUpgrade pidginUpgrade pidgin-docsUpgrade libpurple-devel | Dec 1, 2016 | Mar 15, 2012 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Mar 15, 2012 |
| Freebsd | — | Upgrade libpurple | Dec 10, 2025 | Apr 1, 2012 |
| Suse | — | Upgrade libpurple-develUpgrade libpurpleUpgrade pidginUpgrade libpurple-langUpgrade finchUpgrade pidgin-develUpgrade finch-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpurple0Upgrade finchUpgrade pidgin | Nov 8, 2024 | Mar 15, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub