gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (application crash) via a long URL that is examined with a tooltip.
CVSS Details
- CVSS 3.1 Base Score: 3.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidginUpgrade pidgin-perlUpgrade finch-develUpgrade libpurple-develUpgrade pidgin-docsUpgrade libpurple-tclUpgrade libpurple-perlUpgrade pidgin-develUpgrade libpurpleUpgrade finch | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurpleUpgrade pidginUpgrade libpurple-tclUpgrade finchUpgrade pidgin-perlUpgrade pidgin-develUpgrade finch-develUpgrade libpurple-develUpgrade pidgin-docsUpgrade libpurple-perl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-netstoremanagerUpgrade xfce4-splash-branding-basedonopensuseUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade leechcraft-hotstreamsUpgrade leechcraft-vroobyUpgrade xfdesktop-branding-basedonopensuseUpgrade branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-kbswitchUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-azoth-p100qUpgrade leechcraft-azoth-xooxUpgrade pidgin-plugin-pack-extrasUpgrade libpurple-plugin-bot-sentryUpgrade pidgin-otrUpgrade leechcraft-syncerUpgrade libpurple-plugin-openfetion-langUpgrade libpurple-develUpgrade leechcraft-newlifeUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-otlozhuUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade leechcraft-shellopenUpgrade leechcraft-azoth-birthdaynotifierUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade bot-sentryUpgrade purple-plugin-packUpgrade e17-branding-basedonopensuseUpgrade leechcraft-monocle-seenUpgrade pidgin-guificationsUpgrade leechcraft-gmailnotifierUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-knowhowUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-azoth-metacontactsUpgrade libpurple-branding-basedonopensuseUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-poshuku-fatapeUpgrade telepathy-plugin-sipeUpgrade leechcraft-pintabUpgrade leechcraft-monocle-postrusUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-azoth-hiliUpgrade leechcraft-monocle-docUpgrade leechcraft-lackmanUpgrade leechcraftUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-lmpUpgrade leechcraft-shaitanUpgrade leechcraft-lhtrUpgrade libpurple-langUpgrade leechcraft-cstpUpgrade midori-branding-basedonopensuseUpgrade pidgin-sipeUpgrade libxfce4ui-branding-basedonopensuseUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-poshuku-fuaUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-xproxyUpgrade libpurple-plugin-mrim-langUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-vgrabberUpgrade leechcraft-historyholderUpgrade leechcraft-poshuku-keywordsUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-herbicideUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-choroidUpgrade libpurple-tclUpgrade epiphany-branding-basedonopensuseUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade skype4pidginUpgrade leechcraft-azoth-modnokUpgrade gio-branding-basedonopensuseUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-sb2Upgrade leechcraft-azoth-juickUpgrade leechcraft-lmp-mp3tunesUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-monocleUpgrade leechcraft-launchyUpgrade leechcraft-blogique-hestiaUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade pidgin-guifications-langUpgrade leechcraft-tpiUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-dbusmanagerUpgrade leechcraft-glanceUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-anheroUpgrade leechcraft-azoth-shxUpgrade libpurple-plugin-skypeUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-monocle-pdfUpgrade awesome-branding-basedonopensuseUpgrade libpurple-plugin-sipeUpgrade plymouth-branding-basedonopensuseUpgrade pidgin-develUpgrade pidginUpgrade leechcraft-azoth-vaderUpgrade leechcraft-touchstreamsUpgrade libpurple-branding-openSUSEUpgrade leechcraft-docUpgrade leechcraft-secmanUpgrade pidgin-plugin-guificationsUpgrade finch-develUpgrade leechcraft-tabslistUpgrade leechcraft-aggregatorUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-lastfmscrobbleUpgrade libpurple-plugin-pack-extrasUpgrade compiz-branding-basedonopensuseUpgrade pidgin-plugin-skypeUpgrade libpurple-plugin-mrimUpgrade leechcraft-azoth-velvetbirdUpgrade xfce4-session-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-azoth-rosenthalUpgrade pidgin-embeddedvideoUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-lemonUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-auscrieUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-summaryUpgrade leechcraft-monocle-muUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-liznooUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-kinotifyUpgrade leechcraft-dolozheeUpgrade leechcraft-popishuUpgrade leechcraft-dumbeepUpgrade libpurpleUpgrade leechcraft-secman-simplestorageUpgrade thunar-volman-branding-basedonopensuseUpgrade purple-plugin-pack-langUpgrade telepathy-hazeUpgrade pidgin-plugin-packUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-lmp-graffitiUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-tabsessionmanagerUpgrade libpurple-plugin-packUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-gactsUpgrade pidgin-mrimUpgrade libpurple-plugin-openfetionUpgrade libpurple-meanwhileUpgrade libreoffice-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade kdelibs4-branding-basedonopensuseUpgrade libpurple-plugin-skype-langUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade leechcraft-blogiqueUpgrade pidgin-facebookchatUpgrade leechcraft-networkmonitorUpgrade leechcraft-poshukuUpgrade finchUpgrade leechcraft-azoth-keesoUpgrade xfce4-panel-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade leechcraft-develUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-azothUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-hotsensorsUpgrade leechcraft-netstoremanager-googledriveUpgrade gconf2-branding-basedonopensuseUpgrade pidgin-birthday-reminderUpgrade leechcraft-azoth-xtazyUpgrade leechcraft-monocle-fxbUpgrade leechcraft-azoth-embedmediaUpgrade pidgin-openfetionUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-azoth-depesterUpgrade leechcraft-azoth-otroidUpgrade gnome-menus-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade libsocialweb-branding-basedonopensuseUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-advancednotificationsUpgrade leechcraft-blogique-metida | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub