Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3711
HistoryOct 28, 2010 - 12:00 a.m.

CVE-2010-3711

2010-10-2800:00:03
CWE-20
[email protected]
web.nvd.nist.gov
5

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.

Affected configurations

Nvd
Node
pidginpidginRange≀2.7.3
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
OR
pidginpidginMatch2.4.2
OR
pidginpidginMatch2.4.3
OR
pidginpidginMatch2.5.0
OR
pidginpidginMatch2.5.1
OR
pidginpidginMatch2.5.2
OR
pidginpidginMatch2.5.3
OR
pidginpidginMatch2.5.4
OR
pidginpidginMatch2.5.5
OR
pidginpidginMatch2.5.6
OR
pidginpidginMatch2.5.7
OR
pidginpidginMatch2.5.8
OR
pidginpidginMatch2.5.9
OR
pidginpidginMatch2.6.0
OR
pidginpidginMatch2.6.1
OR
pidginpidginMatch2.6.2
OR
pidginpidginMatch2.6.4
OR
pidginpidginMatch2.6.5
OR
pidginpidginMatch2.6.6
OR
pidginpidginMatch2.7.0
OR
pidginpidginMatch2.7.1
OR
pidginpidginMatch2.7.2

References

Related

seebug 1
cvelist 1
oraclelinux 3
prion 1
openvas 34
nessus 16
altlinux 2
debian 2
debiancve 1
fedora 9
securityvulns 2
redhat 2
veracode 1
ubuntucve 1
slackware 1
cve 1
centos 1
ubuntu 1
seebug
seebug
Pidgin purple_base64_decode()ε‡½ζ•°η©ΊζŒ‡ι’ˆεΌ•η”¨ζ‹’η»ζœεŠ‘ζΌζ΄ž
2010-10-29 00:00:00
cvelist
cvelist
CVE-2010-3711
2010-10-27 22:00:00
oraclelinux
oraclelinux
pidgin security update
2011-02-10 00:00:00
pidgin security update
2010-10-21 00:00:00
pidgin security and bug fix update
2011-05-28 00:00:00
prion
prion
Null pointer dereference
2010-10-28 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2010-305-02)
2012-09-10 00:00:00
Slackware Advisory SSA:2010-305-02 pidgin
2012-09-11 00:00:00
Mandriva Update for pidgin MDVSA-2010:208 (pidgin)
2010-10-22 00:00:00
nessus
nessus
Scientific Linux Security Update : pidgin on SL6.x i386/x86_64
2012-08-01 00:00:00
Fedora 14 : pidgin-2.7.4-1.fc14 (2010-16876)
2010-10-30 00:00:00
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:208)
2010-10-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt1
2010-10-21 00:00:00
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt0.M50P.1
2010-11-12 00:00:00
debian
debian
Subject: BSA-008 Security Update for pidgin
2010-10-22 11:36:43
Subject: BSA-008 Security Update for pidgin
2010-10-22 11:19:31
debiancve
debiancve
CVE-2010-3711
2010-10-28 00:00:03
fedora
fedora
[SECURITY] Fedora 14 Update: pidgin-2.7.4-1.fc14
2010-10-29 20:43:03
[SECURITY] Fedora 14 Update: pidgin-2.7.9-1.fc14
2011-01-05 21:22:52
[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14
2011-03-14 10:22:15
securityvulns
securityvulns
libpurple library / Pidgin DoS
2010-10-24 00:00:00
[ MDVSA-2010:208 ] pidgin
2010-10-24 00:00:00
redhat
redhat
(RHSA-2010:0890) Moderate: pidgin security update
2010-11-16 00:00:00
(RHSA-2010:0788) Moderate: pidgin security update
2010-10-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:48:55
ubuntucve
ubuntucve
CVE-2010-3711
2010-10-27 00:00:00
slackware
slackware
[slackware-security] pidgin
2010-11-02 01:47:57
cve
cve
CVE-2010-3711
2010-10-28 00:00:03
centos
centos
finch, libpurple, pidgin security update
2010-10-21 22:51:36
ubuntu
ubuntu
Pidgin vulnerabilities
2010-11-04 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON
Related for NVD:CVE-2010-3711
seebug1cvelist1oraclelinux3prion1openvas34nessus16altlinux2debian2debiancve1fedora9securityvulns2redhat2veracode1ubuntucve1slackware1cve1centos1ubuntu1