Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2010-1624

Published: 14/05/2010 Updated: 31/03/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Pidgin

Vulnerability Summary

The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin prior to 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pidgin pidgin

canonical ubuntu linux 10.10

canonical ubuntu linux 9.10

canonical ubuntu linux 8.04

canonical ubuntu linux 10.04

Vendor Advisories

Red Hat: Moderate: pidgin security update
Synopsis Moderate: pidgin security update Type/Severity Security Advisory: Moderate Topic Updated pidgin packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnera ...
Ubuntu Security Notice: pidgin vulnerabilities
Pierre Noguès discovered that Pidgin incorrectly handled malformed SLP messages in the MSN protocol handler A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service This issue only affected Ubuntu 804 LTS, 910 and 1004 LTS (CVE-2010-1624) ...

References

CWE-20http://secunia.com/advisories/39801http://www.pidgin.im/news/security/index.php?id=46http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8bhttp://developer.pidgin.im/viewmtn/revision/diff/884d44222e8c81ecec51c25e07d005e002a5479b/with/894460d22c434e73d60b71ec031611988e687c8b/libpurple/protocols/msn/slp.chttp://www.vupen.com/english/advisories/2010/1141http://www.securityfocus.com/bid/40138http://www.mandriva.com/security/advisories?name=MDVSA-2010:097http://www.vupen.com/english/advisories/2010/2755https://bugzilla.redhat.com/show_bug.cgi?id=589973http://secunia.com/advisories/41899http://www.redhat.com/support/errata/RHSA-2010-0788.htmlhttp://www.ubuntu.com/usn/USN-1014-1https://exchange.xforce.ibmcloud.com/vulnerabilities/58559https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18547https://access.redhat.com/errata/RHSA-2010:0788https://usn.ubuntu.com/1014-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook