Buffer overflow in Pidgin

CVE-2014-3695

markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.

Vulnerability class: Buffer Overflow

EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.

Affected products

  • Pidgin — versions 2.10.0, 2.10.1, 2.10.2
  • N/a — versions n/a

Weakness classification (CWE)

References