Unscored severity · published May 14, 2010
CVE-2010-1624
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer…
–
CVSS
5.6%
EPSS
No
On KEV
Description
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pidgin · Pidgin
before 2.7.0 · source: NVD
UL
Ubuntu Linux · Canonical
8.04; 9.10; 10.04; 10.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1624
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1624
Broken Link
http://developer.pidgin.im/viewmtn/revision/diff/884d44222e8c81ecec51c25e07d005e002a5479b/with/894460d22c434e73d60b71ec031611988e687c8b/libpurple/protocols/msn/slp.c
Broken Link
http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8b
Not Applicable
http://secunia.com/advisories/39801
Not Applicable
http://secunia.com/advisories/41899
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:097
Broken Link
http://www.pidgin.im/news/security/index.php?id=46
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation