The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-tclUpgrade pidginUpgrade finch-develUpgrade pidgin-develUpgrade libpurpleUpgrade finchUpgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurple-devel | Dec 1, 2016 | Oct 20, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 20, 2009 |
| Suse | — | Upgrade liboil-x86Upgrade libpurple-branding-upstreamUpgrade gstreamer-0_10Upgrade cdparanoia-x86Upgrade libpurple-langUpgrade desktop-file-utilsUpgrade libpurple-tclUpgrade cdparanoia-32bitUpgrade famUpgrade gnome-vfs2-32bitUpgrade gnome-vfs2Upgrade libpurple-develUpgrade cdparanoiaUpgrade libpurple-meanwhileUpgrade libpurple-plugin-sametimeUpgrade fam-x86Upgrade finch-develUpgrade libogg0-x86Upgrade pidgin-develUpgrade pidginUpgrade liboilUpgrade gnome-vfs2-x86Upgrade libpurpleUpgrade finchUpgrade libogg0Upgrade fam-32bitUpgrade libogg0-32bitUpgrade liboil-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Oct 20, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub