CVE-2013-6487

Several security issues were fixed in Pidgin ...

libgadu could be made to crash or run programs if it received specially crafted network traffic ...

Multiple vulnerabilities have been discovered in Pidgin, a multi-protocol instant messaging client: CVE-2013-6477 Jaime Breva Ribes discovered that a remote XMPP user can trigger a crash by sending a message with a timestamp in the distant future CVE-2013-6478 Pidgin could be crashed through overly wide tooltip windows CVE-2013-6479 ...

Yves Younan and Ryan Pentney discovered that libgadu, a library for accessing the Gadu-Gadu instant messaging service, contained an integer overflow leading to a buffer overflow Attackers which impersonate the server could crash clients and potentially execute arbitrary code For the oldstable distribution (squeeze), this problem has been fixed in ...

Integer overflow in libpurple/protocols/gg/lib/httpc in the Gadu-Gadu (gg) parser in Pidgin before 2108 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow ...