CVE-2010-1624
Published: 14 May 2010
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.
Priority
Status
Package | Release | Status |
---|---|---|
pidgin Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
hardy |
Released
(1:2.4.1-1ubuntu2.10)
|
|
jaunty |
Ignored
(end of life)
|
|
karmic |
Released
(1:2.6.2-1ubuntu7.3)
|
|
lucid |
Released
(1:2.6.6-1ubuntu4.1)
|
|
maverick |
Not vulnerable
(1:2.7.3-1ubuntu3)
|
|
upstream |
Released
(2.7.0)
|
|
Patches: upstream: http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8b |