SUSE CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2002-1362

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service crash via malformed ICQ message types without a 0xFE separator character...

CPU exhaustion in ICQ

Large number of smiles in messages cause CPU exhaustion...