gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-tclUpgrade finchUpgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurpleUpgrade finch-develUpgrade pidgin-develUpgrade pidginUpgrade libpurple-devel | Dec 1, 2016 | Feb 24, 2010 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 24, 2010 |
| Freebsd | — | Upgrade libpurpleUpgrade pidgin | Dec 10, 2025 | Apr 20, 2010 |
| Suse | — | Upgrade libpurple-langUpgrade finch-develUpgrade libpurple-branding-upstreamUpgrade finchUpgrade libpurpleUpgrade pidgin-develUpgrade libpurple-plugin-sametimeUpgrade pidginUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurple-meanwhile | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Feb 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub