The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-develUpgrade libpurple-perlUpgrade finchUpgrade libpurpleUpgrade pidginUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-develUpgrade libpurple-tcl | Dec 1, 2016 | Oct 20, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 20, 2009 |
| Suse | — | Upgrade gnome-vfs2Upgrade libpurple-develUpgrade gnome-vfs2-32bitUpgrade cdparanoiaUpgrade gstreamer-0_10Upgrade desktop-file-utilsUpgrade libpurple-langUpgrade libpurple-branding-upstreamUpgrade famUpgrade liboil-x86Upgrade libpurple-tclUpgrade cdparanoia-32bitUpgrade cdparanoia-x86Upgrade finch-develUpgrade fam-32bitUpgrade pidgin-develUpgrade pidginUpgrade liboilUpgrade finchUpgrade libogg0-32bitUpgrade gnome-vfs2-x86Upgrade libogg0Upgrade libpurple-meanwhileUpgrade libpurple-plugin-sametimeUpgrade libpurpleUpgrade fam-x86Upgrade liboil-32bitUpgrade libogg0-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Oct 20, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub