The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Jul 3, 2012 |
| Centos_linux | — | Upgrade pidginUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidgin-docsUpgrade pidgin-perlUpgrade finchUpgrade pidgin-develUpgrade libpurple-perlUpgrade finch-develUpgrade libpurple | Dec 1, 2016 | Jul 3, 2012 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Jul 3, 2012 |
| Oracle Solaris | — | Upgrade communication/im/pidgin to version 2.10.4-0.175.0.10.0.3.0 on Solaris 11.0 | May 29, 2017 | Jul 3, 2012 |
| Oracle_linux | — | Upgrade finch-develUpgrade libpurple-develUpgrade libpurple-perlUpgrade pidgin-docsUpgrade libpurpleUpgrade libpurple-tclUpgrade pidgin-develUpgrade pidgin-perlUpgrade pidginUpgrade finch | Oct 16, 2024 | Jul 3, 2012 |
| Suse | — | Upgrade libpurple-debuginfoUpgrade libpurple-develUpgrade pidgin-debugsourceUpgrade libpurple-langUpgrade libpurple-tclUpgrade libpurple-meanwhile-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade libpurple-meanwhileUpgrade libpurple-branding-upstreamUpgrade pidginUpgrade pidgin-evolutionUpgrade libpurpleUpgrade finchUpgrade pidgin-develUpgrade finch-debuginfoUpgrade finch-develUpgrade pidgin-evolution-debuginfoUpgrade pidgin-debuginfo | Feb 17, 2015 | Jul 3, 2012 |
| Ubuntu | — | Upgrade pidginUpgrade finchUpgrade libpurple0 | Nov 8, 2024 | Jul 3, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub