Fluid Attacks Database

Description

The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	pidgin	>=0 <2.10.2-1	2.10.2-1
debian 13	pidgin	>=0 <2.10.2-1	2.10.2-1
rpm rhel6	pidgin	<0:2.7.9-5.el6.2	0:2.7.9-5.el6.2
rpm rhel5	pidgin	<0:2.6.6-11.el5.4	0:2.6.6-11.el5.4
debian 11	pidgin	>=0 <2.10.2-1	2.10.2-1
debian 14	pidgin	>=0 <2.10.2-1	2.10.2-1

Aliases

1. CVE-2012-11782. NVD-2012-11783. OSV-DEBIAN-2012-11784. OSV-2012-11785. SECURITY-TRACKER-CVE-2012-1178

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.