libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurpleUpgrade libpurple-perlUpgrade pidgin-develUpgrade finchUpgrade finch-devel | Dec 1, 2016 | Mar 14, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Mar 14, 2011 |
| Oracle_linux | — | Upgrade pidgin-perlUpgrade pidginUpgrade finch-develUpgrade pidgin-docsUpgrade finchUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurple-tclUpgrade libpurple-develUpgrade libpurple | Oct 16, 2024 | Mar 14, 2011 |
| Suse | — | Upgrade libpurpleUpgrade libpurple-plugin-sametimeUpgrade finchUpgrade pidgin-develUpgrade libpurple-langUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurple-meanwhileUpgrade pidginUpgrade libpurple-branding-upstreamUpgrade finch-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Mar 14, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub