Back to search
CVE-2011-4601
Published: Dec 25, 2011
Modified: Aug 7, 2024
PUBLISHED
Description
family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2011:1820
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2012:0066
vendor-advisory
x_refsource_SUSE
MDVSA-2011:183
vendor-advisory
x_refsource_MANDRIVA
47219
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20111210 Re: CVE request: Pidgin crash
mailing-list
x_refsource_MLIST
[oss-security] 20111209 CVE request: Pidgin crash
mailing-list
x_refsource_MLIST
http://pidgin.im/news/security/?id=57
x_refsource_CONFIRM
RHSA-2011:1821
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:18408
vdb-entry
signature
x_refsource_OVAL
47234
third-party-advisory
x_refsource_SECUNIA
51010
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now