Buffer overflow in Pidgin

CVE-2014-3696

nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.

Vulnerability class: Buffer Overflow

EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.

Affected products

  • Pidgin — versions 2.10.0, 2.10.1, 2.10.2
  • N/a — versions n/a

Weakness classification (CWE)

References