The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade finchUpgrade libpurple-perlUpgrade pidgin-perlUpgrade libpurpleUpgrade libpurple-tclUpgrade finch-develUpgrade pidgin-devel | Dec 1, 2016 | Mar 14, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Mar 14, 2011 |
| Oracle_linux | — | Upgrade finchUpgrade libpurple-tclUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidginUpgrade finch-develUpgrade pidgin-perl | Oct 16, 2024 | Mar 14, 2011 |
| Suse | — | Upgrade finch-develUpgrade libpurple-branding-upstreamUpgrade pidginUpgrade pidgin-develUpgrade libpurple-develUpgrade libpurpleUpgrade libpurple-plugin-sametimeUpgrade libpurple-meanwhileUpgrade finchUpgrade libpurple-langUpgrade libpurple-tcl | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Mar 14, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub