NetSight
IP …
medium5.0

CVE-2010-1624

The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of se…

Impact

The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.

Affected products

VendorProductAffected versions
PidginPidgin
before 2.7.0
CanonicalUbuntu Linux
Versions 8.04, 9.10, 10.04, 10.10

Weakness classification

CWE-20

References