Every CVESearch/Get API key

CVE-2011-3184

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in...

4.3 MediumFix available

CVE-2011-3184 is a medium vulnerability (CVSS 4.3) in Pidgin, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.86%, the 90th percentile. Fixed in pidgin 2.10.0-1.

What does this mean?
Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
3.86%EPSS, 90th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.10.0-1pidgin +2 more

Description

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Exploit likelihood

3.86%Up 0.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pidgin
Debian:12
before 2.10.0-1
2.10.0-1
pidgin
Debian:13
before 2.10.0-1
2.10.0-1
pidgin
Debian:14
before 2.10.0-1
2.10.0-1

What each source reports

NVD Score used4.3

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
CVE-2011-3184
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
CVE-2011-3184
Updated
2026-11-02
EUVDEUVD-2011-3151No score

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
EUVD-2011-3151
Updated
2026-11-03
GitHub AdvisoriesGHSA-4fh6-vrqh-wvpvNo score

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in...

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
GHSA-4fh6-vrqh-wvpv
Updated
2026-11-02
OSVNo score

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
CVE-2011-3184
Updated
2026-11-02
OSVDEBIAN-CVE-2011-3184No score

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Record
DEBIAN-CVE-2011-3184
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 13 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open