Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-perlUpgrade pidgin-develUpgrade pidgin-perlUpgrade pidginUpgrade finchUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurpleUpgrade finch-devel | Dec 1, 2016 | May 26, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | May 26, 2009 |
| Freebsd | — | Upgrade finchUpgrade pidginUpgrade libpurple | Dec 10, 2025 | Jun 16, 2009 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | May 26, 2009 |
| Suse | — | Upgrade finch-develUpgrade libpurpleUpgrade pidgin-develUpgrade finchUpgrade pidginUpgrade libpurple-langUpgrade libpurple-devel | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | May 26, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub