Fluid Attacks Database

Description

The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	pidgin	>=0 <2.7.0-1	2.7.0-1
debian 13	pidgin	>=0 <2.7.0-1	2.7.0-1
rpm rhel6	pidgin	-	-
debian 12	pidgin	>=0 <2.7.0-1	2.7.0-1
debian 11	pidgin	>=0 <2.7.0-1	2.7.0-1
rpm rhel5	pidgin	<0:2.6.6-5.el5_5	0:2.6.6-5.el5_5

Aliases

1. CVE-2010-16242. NVD-2010-16243. OSV-DEBIAN-2010-16244. OSV-2010-16245. SECURITY-TRACKER-CVE-2010-1624

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.