CVE-2012-1178
Published: 15 March 2012
The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
pidgin Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Released
(1:2.6.6-1ubuntu4.5)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Released
(1:2.7.11-1ubuntu2.2)
|
|
| oneiric |
Released
(1:2.10.0-0ubuntu2.1)
|
|
| precise |
Not vulnerable
(1:2.10.2-1ubuntu1)
|
|
| upstream |
Released
(2.10.2-1)
|
|
|
Patches: upstream: http://hg.pidgin.im/pidgin/main/rev/1b1b97b8e942 upstream: http://hg.pidgin.im/pidgin/main/rev/f9eeb175a5c9 upstream: http://hg.pidgin.im/pidgin/main/rev/f5fd49c83637 upstream: http://hg.pidgin.im/pidgin/main/rev/5c02bc93f2c4 upstream: http://hg.pidgin.im/pidgin/main/rev/85ec889f1675 |
||