This host has installed with Pidgin and is prone to denial of service vulnerabilities.

Successful exploitation will allow attacker to crash the affected application. Impact Level: Application

Upgrade to Pidgin version 2.10.4 or later, For updates refer to http://pidgin.im/download

- An error in 'msn_message_parse_payload()' function handling messages with certain characters or character encodings can be exploited to cause a crash. - An error in SOCKS5 proxy handling code can be exploited to dereference an invalid pointer and cause a crash by sending multiple specially crafted file transfer requests.

Pidgin version prior 2.10.4 on Windows

• http://hg.pidgin.im/pidgin/main/rev/4d6bcb4f4ea4
• http://pidgin.im/news/security/?id=63
• http://secunia.com/advisories/49036/
• http://www.pidgin.im/news/security/?id=62

---

Updated on 2015-03-25