Vulnerabilities > Pidgin
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-02-16 | CVE-2013-0274 | Unspecified vulnerability in Pidgin upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network. | 2.9 |
| 2013-02-16 | CVE-2013-0273 | Unspecified vulnerability in Pidgin sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet. | 5.0 |
| 2013-02-16 | CVE-2013-0272 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Pidgin Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header. | 6.8 |
| 2013-02-16 | CVE-2013-0271 | Arbitrary File Overwrite vulnerability in Pidgin 'Libpurple' The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname. | 5.0 |
| 2012-08-08 | CVE-2011-4922 | Information Exposure vulnerability in Pidgin cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents. | 2.1 |
| 2012-07-07 | CVE-2012-3374 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Pidgin Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message. | 7.5 |
| 2012-07-03 | CVE-2012-2318 | Improper Input Validation vulnerability in Pidgin msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message. | 5.0 |
| 2012-07-03 | CVE-2012-2214 | Resource Management Errors vulnerability in Pidgin proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests. | 3.5 |
| 2012-05-23 | CVE-2012-2369 | USE of Externally-Controlled Format String vulnerability in Cypherpunks Pidgin-Otr 3.2.0 Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message. | 7.5 |
| 2012-03-15 | CVE-2012-1178 | Resource Management Errors vulnerability in Pidgin The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding. | 5.0 |