Published: 25/12/2011 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin prior to 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote malicious users to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pidgin pidgin 2.8.0
pidgin pidgin 2.7.11
pidgin pidgin 2.7.4
pidgin pidgin 2.7.3
pidgin pidgin 2.6.2
pidgin pidgin 2.6.1
pidgin pidgin 2.5.3
pidgin pidgin 2.5.2
pidgin pidgin 2.3.1
pidgin pidgin 2.3.0
pidgin pidgin 2.0.1
pidgin pidgin 2.0.0
pidgin pidgin 2.7.10
pidgin pidgin 2.7.9
pidgin pidgin 2.7.2
pidgin pidgin 2.7.1
pidgin pidgin 2.6.0
pidgin pidgin 2.7.8
pidgin pidgin 2.7.7
pidgin pidgin 2.6.6
pidgin pidgin 2.6.5
pidgin pidgin 2.5.7
pidgin pidgin 2.5.6
pidgin pidgin 2.4.3
pidgin pidgin 2.4.2
pidgin pidgin 2.2.0
pidgin pidgin 2.1.1
pidgin pidgin 2.5.9
pidgin pidgin 2.5.8
pidgin pidgin 2.5.1
pidgin pidgin 2.5.0
pidgin pidgin 2.2.2
pidgin pidgin 2.2.1
pidgin pidgin
pidgin pidgin 2.9.0
pidgin pidgin 2.7.6
pidgin pidgin 2.7.5
pidgin pidgin 2.6.4
pidgin pidgin 2.6.3
pidgin pidgin 2.5.5
pidgin pidgin 2.5.4
pidgin pidgin 2.4.1
pidgin pidgin 2.4.0
pidgin pidgin 2.1.0
pidgin pidgin 2.0.2

Several security issues were fixed in Pidgin ...

Synopsis Moderate: pidgin security update Type/Severity Security Advisory: Moderate Topic Updated pidgin packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Synopsis Moderate: pidgin security update Type/Severity Security Advisory: Moderate Topic Updated pidgin packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnera ...

CWE-20 http://pidgin.im/news/security/?id=57 http://developer.pidgin.im/viewmtn/revision/info/757272a78a8ca6027d518e614712c3399e34dda3 http://developer.pidgin.im/viewmtn/revision/diff/bc79b1bf09dcfa1d8edac86a06761fce7416e69c/with/757272a78a8ca6027d518e614712c3399e34dda3/libpurple/protocols/oscar/family_feedbag.c http://www.redhat.com/support/errata/RHSA-2011-1820.html http://www.redhat.com/support/errata/RHSA-2011-1821.html http://secunia.com/advisories/47219 http://secunia.com/advisories/47234 http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 http://www.securityfocus.com/bid/51010 http://www.openwall.com/lists/oss-security/2011/12/10/1 http://www.openwall.com/lists/oss-security/2011/12/10/2 https://hermes.opensuse.org/messages/13195955 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18408 https://usn.ubuntu.com/1500-1/https://nvd.nist.gov

CVE-2011-4601

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect