LI
Product
Libpurple
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Libpurple to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3594 | – | Nov 4 | The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a… Affected: through 2.10.0; 1.0; 2.0.0; 2.0.1; 2.0.2; 2.1.0; +34 more |
| CVE-2011-2943 | – | Aug 29 | The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which… Affected: 2.8.0; 2.9.0 |
| CVE-2010-4528 | – | Jan 7 | directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer… Affected: 2.7.6; 2.7.7; 2.7.8 |
| CVE-2009-3085 | – | Sep 8 | The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote… Affected: All versions, or not specified |
| CVE-2009-3084 | – | Sep 8 | The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote… Affected: 2.6.0; 2.6.1 |
| CVE-2009-3083 | – | Sep 8 | The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2009-2703 | – | Sep 8 | libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and… Affected: All versions, or not specified |
Showing 7