SUSE CVE-2013-6490

The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow...

The vulnerability of the Pidgin instant messaging system allows a remote attacker to trigger a service denial or execute arbitrary code.

The Pidgin software contains a vulnerability in its component designed to work on the SIMPLE protocol. Exploiting this vulnerability allows a remote attacker to trigger a service failure or execute arbitrary code by manipulating message headers...