libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidgin-perlUpgrade finch-develUpgrade pidgin-develUpgrade finchUpgrade libpurpleUpgrade libpurple-tclUpgrade libpurple-perlUpgrade pidginUpgrade libpurple-devel | Dec 1, 2016 | Mar 14, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Mar 14, 2011 |
| Oracle_linux | — | Upgrade finchUpgrade libpurpleUpgrade libpurple-perlUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidgin-docsUpgrade pidgin-develUpgrade pidginUpgrade pidgin-perlUpgrade finch-devel | Oct 16, 2024 | Mar 14, 2011 |
| Suse | — | Upgrade finch-develUpgrade libpurple-branding-upstreamUpgrade pidginUpgrade libpurple-tclUpgrade libpurple-develUpgrade finchUpgrade pidgin-develUpgrade libpurple-langUpgrade libpurpleUpgrade libpurple-plugin-sametimeUpgrade libpurple-meanwhile | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Mar 14, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub