Unscored severity · published Oct 1, 2007
CVE-2007-4996
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial…
–
CVSS
1.8%
EPSS
No
On KEV
Description
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pidgin · Pidgin
2.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4996
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4996
fedoranews.org
http://fedoranews.org/updates/FEDORA-2007-236.shtml
Patch
http://secunia.com/advisories/27010
secunia.com
http://secunia.com/advisories/27088
Patch
http://www.pidgin.im/news/security/?id=23
www.securityfocus.com
http://www.securityfocus.com/archive/1/481402/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/25872
More from Pidgin
9.8
CVE-2016-1000030
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and…
9.8
CVE-2017-2640
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content
8.1
CVE-2016-2378
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin
8.1
CVE-2016-2377
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
8.1
CVE-2016-2376
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin