NetSight
IP …
medium5.0

CVE-2012-2318

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denia…

Impact

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.

Affected products

VendorProductAffected versions
PidginPidgin
through 2.10.3
Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1

Weakness classification

CWE-20

References