libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade finchUpgrade libpurple-perlUpgrade pidgin-perlUpgrade libpurpleUpgrade libpurple-tclUpgrade finch-develUpgrade pidgin-devel | Dec 1, 2016 | Mar 14, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Mar 14, 2011 |
| Oracle_linux | — | Upgrade finchUpgrade libpurple-tclUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidginUpgrade finch-develUpgrade pidgin-perl | Oct 16, 2024 | Mar 14, 2011 |
| Suse | — | Upgrade finch-develUpgrade libpurple-branding-upstreamUpgrade pidginUpgrade pidgin-develUpgrade libpurple-develUpgrade libpurpleUpgrade libpurple-plugin-sametimeUpgrade libpurple-meanwhileUpgrade finchUpgrade libpurple-langUpgrade libpurple-tcl | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Mar 14, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub