Summary
This host is installed with Pidgin and is prone to denial of service vulnerabilities.
Impact
Successful exploitation will allow remote attackers to cause the application to crash, denying service to legitimate users.
Impact Level: Application
Solution
Upgrade to Pidgin version 2.10.1 or later,
For updates refer to http://pidgin.im/download/windows/
Insight
Multiplw flaws are due to
- An error in the silc_channel_message function in ops.c in the SILC protocol plugin in libpurple, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages.
- An error in the XMPP protocol plugin in libpurple, which fails to ensure that the incoming message contained all required fields when receiving various stanzas related to voice and video chat.
- An error in the family_feedbag.c in the oscar protocol plugin, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages.
Affected
Pidgin versions prior to 2.10.1
References
Severity
Classification
-
CVE CVE-2011-4601, CVE-2011-4602, CVE-2011-4603 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities