Vulnerabilities > Pidgin > Libpurple > 2.8.0

DATE CVE VULNERABILITY TITLE RISK
2011-11-04 CVE-2011-3594 Buffer Errors vulnerability in Pidgin Libpurple and Pidgin
The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
network
pidgin CWE-119
4.3
2011-08-29 CVE-2011-2943 Denial of Service and Security Bypass vulnerability in Pidgin Libpurple and Pidgin
The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response.
network
pidgin
4.3