Null pointer dereference

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

CVE-2011-1091

CVE-2011-1091 affects the Yahoo! protocol plugin (libpurple) used by Pidgin, where libymsg.c is vulnerable to NULL pointer dereference when processing malformed YMSG notifications or YMSG SMS messages, potentially causing denial of service. The issue is tied to the Yahoo! Messenger protocol plug-...

PT-2011-2863 · Pidgin +1 · Pidgin +1

Name of the Vulnerable Software and Affected Versions: Pidgin versions 2.6.0 through 2.7.10 Description: The issue allows remote authenticated users to cause a denial of service through malformed YMSG notification packets, resulting in a NULL pointer dereference and application crash. Additionall...