Published: 24/02/2010 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

gtkimhtml.c in Pidgin prior to 2.6.6 allows remote malicious users to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pidgin pidgin 2.6.2
pidgin pidgin 2.6.1
pidgin pidgin 2.5.3
pidgin pidgin
pidgin pidgin 2.6.4
pidgin pidgin 2.5.5
pidgin pidgin 2.5.4
pidgin pidgin 2.4.1
pidgin pidgin 2.4.0
pidgin pidgin 2.1.0
pidgin pidgin 2.0.2
pidgin pidgin 2.5.2
pidgin pidgin 2.3.1
pidgin pidgin 2.3.0
pidgin pidgin 2.0.1
pidgin pidgin 2.0.0
pidgin pidgin 2.6.0
pidgin pidgin 2.5.9
pidgin pidgin 2.5.1
pidgin pidgin 2.5.0
pidgin pidgin 2.2.2
pidgin pidgin 2.2.1
pidgin pidgin 2.5.8
pidgin pidgin 2.5.7
pidgin pidgin 2.5.6
pidgin pidgin 2.4.3
pidgin pidgin 2.4.2
pidgin pidgin 2.2.0
pidgin pidgin 2.1.1

Synopsis Moderate: pidgin security update Type/Severity Security Advisory: Moderate Topic Updated pidgin packages that fix three security issues are now availablefor Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Team ...

Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service (CVE-2010-0277) ...

Debian Bug report logs - #572946 qutecom: multiple vulnerabilities Package: qutecom; Maintainer for qutecom is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for qutecom is src:qutecom (PTS, buildd, popcon) Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Sun, 7 Mar 2010 19:4 ...

Debian Bug report logs - #566775 pidgin: CVE-2010-0277 denial-of-service Package: pidgin; Maintainer for pidgin is Ari Pollak <ari@debianorg>; Source for pidgin is src:pidgin (PTS, buildd, popcon) Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Mon, 25 Jan 2010 02:21:01 UTC Severity: important Tags ...

Several remote vulnerabilities have been discovered in Pidgin, a multi protocol instant messaging client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-0420 Crafted nicknames in the XMPP protocol can crash Pidgin remotely CVE-2010-0423 Remote contacts may send too many custom smilies, crashing Pidg ...

CWE-399 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html http://www.ubuntu.com/usn/USN-902-1 http://secunia.com/advisories/38712 https://rhn.redhat.com/errata/RHSA-2010-0115.html http://www.osvdb.org/62440 http://www.securityfocus.com/bid/38294 http://www.mandriva.com/security/advisories?name=MDVSA-2010:041 http://www.vupen.com/english/advisories/2010/0413 http://secunia.com/advisories/38658 https://bugzilla.redhat.com/show_bug.cgi?id=565792 http://secunia.com/advisories/38563 http://secunia.com/advisories/38640 http://pidgin.im/news/security/?id=45 http://developer.pidgin.im/wiki/ChangeLog http://secunia.com/advisories/38915 http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html http://www.vupen.com/english/advisories/2010/0914 http://www.debian.org/security/2010/dsa-2038 http://www.vupen.com/english/advisories/2010/1020 http://secunia.com/advisories/39509 http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 https://exchange.xforce.ibmcloud.com/vulnerabilities/56394 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9842 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17554 https://access.redhat.com/errata/RHSA-2010:0115 https://usn.ubuntu.com/902-1/https://nvd.nist.gov

CVE-2010-0423

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect