Fluid Attacks Database

Description

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	pidgin	>=0 <2.6.6-1	2.6.6-1
debian 12	pidgin	>=0 <2.6.6-1	2.6.6-1
debian 13	pidgin	>=0 <2.6.6-1	2.6.6-1
debian 14	pidgin	>=0 <2.6.6-1	2.6.6-1
rpm rhel5	pidgin	<0:2.6.6-1.el5	0:2.6.6-1.el5

Aliases

1. CVE-2010-04232. NVD-2010-04233. OSV-DEBIAN-2010-04234. OSV-2010-04235. SECURITY-TRACKER-CVE-2010-0423

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.