msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Jul 3, 2012 |
| Centos_linux | — | Upgrade pidgin-docsUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidginUpgrade libpurple-perlUpgrade pidgin-perlUpgrade finchUpgrade finch-develUpgrade pidgin-develUpgrade libpurple | Dec 1, 2016 | Jul 3, 2012 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Jul 3, 2012 |
| Oracle Solaris | — | Upgrade communication/im/pidgin to version 2.10.4-0.175.0.10.0.3.0 on Solaris 11.0 | May 29, 2017 | Jul 3, 2012 |
| Oracle_linux | — | Upgrade pidgin-develUpgrade pidginUpgrade pidgin-perlUpgrade finchUpgrade libpurple-tclUpgrade libpurpleUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidgin-docsUpgrade finch-devel | Oct 16, 2024 | Jul 3, 2012 |
| Suse | — | Upgrade pidgin-debuginfoUpgrade finch-develUpgrade libpurple-branding-upstreamUpgrade pidgin-evolutionUpgrade pidginUpgrade finch-debuginfoUpgrade libpurpleUpgrade pidgin-develUpgrade libpurple-meanwhileUpgrade finchUpgrade libpurple-tcl-debuginfoUpgrade pidgin-evolution-debuginfoUpgrade libpurple-debuginfoUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurple-langUpgrade pidgin-debugsourceUpgrade libpurple-meanwhile-debuginfo | Feb 17, 2015 | Jul 3, 2012 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidginUpgrade finch | Nov 8, 2024 | Jul 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub