Vulnerability in Pidgin
CVE-2013-0274
upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.
EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.
Affected products
- Pidgin — versions 2.0.0, 2.0.1, 2.0.2
- N/a — versions n/a
References
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (signature, x_refsource_OVAL, vdb-entry)