The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurpleUpgrade pidgin-perlUpgrade finch-develUpgrade libpurple-tclUpgrade pidginUpgrade libpurple-develUpgrade pidgin-develUpgrade finchUpgrade libpurple-perl | Dec 1, 2016 | Jan 9, 2010 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Jan 9, 2010 |
| Freebsd | — | Upgrade libpurpleUpgrade pidgin | Dec 10, 2025 | Apr 20, 2010 |
| Suse | — | Upgrade libpurple-plugin-sametimeUpgrade pidginUpgrade libpurple-tclUpgrade libpurpleUpgrade libpurple-develUpgrade libpurple-meanwhileUpgrade finchUpgrade libpurple-branding-upstreamUpgrade finch-develUpgrade pidgin-develUpgrade libpurple-lang | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Jan 9, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub