Fluid Attacks Database

Description

libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	pidgin	>=0 <2.2.2-1	2.2.2-1
debian 13	pidgin	>=0 <2.2.2-1	2.2.2-1
debian 11	pidgin	>=0 <2.2.2-1	2.2.2-1
debian 12	pidgin	>=0 <2.2.2-1	2.2.2-1

Aliases

1. CVE-2007-49992. NVD-2007-49993. OSV-DEBIAN-2007-49994. OSV-2007-49995. SECURITY-TRACKER-CVE-2007-4999

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.