CVE-2012-2318

2012-07-0300:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.3%

JSON

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does
not properly handle crafted characters, which allows remote servers to
cause a denial of service (application crash) by placing these characters
in a text/plain message.

Bugs

<https://bugs.launchpad.net/bugs/996691>

Notes

Author	Note
jdstrand	claimed to be fixed in 2.10.4

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchpidgin< 1:2.6.6-1ubuntu4.5UNKNOWN
ubuntu11.04noarchpidgin< 1:2.7.11-1ubuntu2.2UNKNOWN
ubuntu11.10noarchpidgin< 1:2.10.0-0ubuntu2.1UNKNOWN
ubuntu12.04noarchpidgin< 1:2.10.3-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	pidgin	< 1:2.6.6-1ubuntu4.5	UNKNOWN
ubuntu	11.04	noarch	pidgin	< 1:2.7.11-1ubuntu2.2	UNKNOWN
ubuntu	11.10	noarch	pidgin	< 1:2.10.0-0ubuntu2.1	UNKNOWN
ubuntu	12.04	noarch	pidgin	< 1:2.10.3-0ubuntu1.1	UNKNOWN