The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-tclUpgrade pidgin-develUpgrade libpurpleUpgrade finchUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidginUpgrade pidgin-perlUpgrade finch-devel | Dec 1, 2016 | Sep 8, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Sep 8, 2009 |
| Suse | — | Upgrade famUpgrade liboil-x86Upgrade liboilUpgrade libpurple-branding-upstreamUpgrade finch-develUpgrade cdparanoia-x86Upgrade libpurple-langUpgrade liboil-32bitUpgrade cdparanoia-32bitUpgrade libpurpleUpgrade desktop-file-utilsUpgrade gnome-vfs2-32bitUpgrade libpurple-plugin-sametimeUpgrade cdparanoiaUpgrade fam-32bitUpgrade pidginUpgrade gnome-vfs2Upgrade gnome-vfs2-x86Upgrade libogg0Upgrade libpurple-meanwhileUpgrade libpurple-tclUpgrade pidgin-develUpgrade libpurple-develUpgrade libogg0-x86Upgrade libogg0-32bitUpgrade gstreamer-0_10Upgrade finchUpgrade fam-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Sep 8, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub