Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 90

Export CSV
CVE-2009-3615

Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Adium Pidgin Redhat
Products
Adium Pidgin Enterprise Linux
CVE-2010-0013

pidgin/libpurple: MSN custom smiley request directory traversal file disclosure

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.

CVSS 3.1 · 7.5 High EPSS 12.5% KEV · Not listed
Vendors
Adium Fedoraproject Opensuse and 3 more
Products
Adium Fedora Opensuse and 4 more
CVE-2010-0277

pidgin MSN protocol plugin memory corruption

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Adium Pidgin Redhat
Products
Adium Pidgin Enterprise Linux
CVE-2009-1376

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

CVSS 2.0 · 9.3 Critical EPSS 13.3% KEV · Not listed
Vendors
Pidgin Redhat
Products
Pidgin Enterprise Linux
CVE-2019-25544

Pidgin 2.13.0 Denial of Service via Malformed Username

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pidgin
Products
Pidgin
CVE-2016-2372

pidgin: MXIT File Transfer Length Memory Disclosure Vulnerability

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious user, server, or man-in-the-middle attacker can send an invalid size for a file transfer which will trigger an out-of-bounds read vulnerability. This could result in a denial of service or copy data from memory to the file, resulting in an information leak if the file is sent to another user.

CVSS 3.0 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2370

pidgin: MXIT Custom Resource Denial of Service Vulnerability

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an out-of-bounds read. A malicious server or man-in-the-middle attacker can send invalid data to trigger this vulnerability.

CVSS 3.0 · 5.9 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2373

pidgin: MXIT Contact Mood Denial of Service Vulnerability

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious server or user can send an invalid mood to trigger this vulnerability.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2369

pidgin: MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability

A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a denial of service vulnerability. A malicious server can send a packet starting with a NULL byte triggering the vulnerability.

CVSS 3.0 · 5.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2371

pidgin: MXIT Extended Profiles Code Execution Vulnerability

An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.

CVSS 3.0 · 8.1 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2374

pidgin: MXIT MultiMX Message Code Execution Vulnerability

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.

CVSS 3.0 · 8.1 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2367

pidgin: MXIT Avatar Length Memory Disclosure Vulnerability

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious user, server, or man-in-the-middle can send an invalid size for an avatar which will trigger an out-of-bounds read vulnerability. This could result in a denial of service or copy data from memory to the file, resulting in an information leak if the avatar is sent to another user.

CVSS 3.0 · 5.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2376

pidgin: MXIT read stage 0x3 Code Execution Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.

CVSS 3.0 · 8.1 High EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2365

pidgin: MXIT Markup Command Denial of Service Vulnerability

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data to trigger this vulnerability and cause a crash.

CVSS 3.0 · 5.9 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2377

pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the vulnerability.

CVSS 3.0 · 8.1 High EPSS 2.6% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2366

pidgin: MXIT Table Command Denial of Service Vulnerability

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious server or an attacker who intercepts the network traffic can send invalid data to trigger this vulnerability and cause a crash.

CVSS 3.0 · 5.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2368

pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities

Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.

CVSS 3.0 · 8.1 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2375

pidgin: MXIT Suggested Contacts Memory Disclosure Vulnerability

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact information sent from the server can result in memory disclosure.

CVSS 3.0 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2378

pidgin: MXIT get_utf8_string Code Execution Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the server could potentially result in a buffer overflow, potentially resulting in memory corruption. A malicious server or an unfiltered malicious user can send negative length values to trigger this vulnerability.

CVSS 3.0 · 8.1 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2380

pidgin: MXIT mxit_convert_markup_tx Information Leak Vulnerability

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead to a potential out-of-bounds read.

CVSS 3.0 · 3.1 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin