CVE-2010-3711
Published: 27 October 2010
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
pidgin Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Released
(1:2.4.1-1ubuntu2.10)
|
|
| karmic |
Released
(1:2.6.2-1ubuntu7.3)
|
|
| lucid |
Released
(1:2.6.6-1ubuntu4.1)
|
|
| maverick |
Released
(1:2.7.3-1ubuntu3.1)
|
|
| upstream |
Released
(2.7.4-2)
|
|
|
Patches: upstream: http://developer.pidgin.im/viewmtn/revision/info/b01c6a1f7fe4d86b83f5f10917b3cb713989cfcc |
||