Skip to content

Pidgin vulnerabilities

Products

Newest

pidginThe pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote...CVE-2011-4939Fix available6.4 MediumMarch 15, 2012
pidginfamily_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not...CVE-2011-4601Fix available5.0 MediumDecember 25, 2011
pidginThe silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin...CVE-2011-4603Fix available5.0 MediumDecember 17, 2011
pidginThe XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing...CVE-2011-4602Fix available5.0 MediumDecember 17, 2011
pidgin libpurple, pidgin +1 moreThe g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier,...CVE-2011-3594Fix available4.3 MediumNovember 4, 2011
pidgingtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...CVE-2011-31859.3 HighAugust 29, 2011
pidginThe msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in...CVE-2011-3184Fix available4.3 MediumAugust 29, 2011
pidgin libpurple, pidgin +1 moreThe irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in...CVE-2011-2943Fix available4.3 MediumAugust 29, 2011
pidginlibymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1)...CVE-2011-1091Fix available4.0 MediumMarch 14, 2011
pidgin libpurple, pidgin +1 moredirectconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9...CVE-2010-4528Fix available4.0 MediumJanuary 7, 2011
pidginlibpurple in Pidgin before 2.7.4 does not properly validate the return value of the...CVE-2010-3711Fix available4.0 MediumOctober 27, 2010
pidginThe clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin...CVE-2010-2528Fix available4.0 MediumJuly 29, 2010
pidgin, canonical ubuntu linux +1 moreThe msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2...CVE-2010-1624Fix available5.0 MediumMay 14, 2010
pidgingtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU...CVE-2010-0423Fix available5.0 MediumFebruary 24, 2010
pidginlibpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does...CVE-2010-0420Fix available4.3 MediumFebruary 24, 2010
adium, pidgin +1 moreslp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium...CVE-2010-0277Fix available5.0 MediumJanuary 9, 2010
adium, pidgin, fedoraproject fedora +4 more +6 moreDirectory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6...CVE-2010-0013Public exploitFix availableEPSS 12.5%7.5 HighJanuary 9, 2010
adium, pidgin +1 moreThe OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows...CVE-2009-3615Fix available5.0 MediumOctober 20, 2009
pidgin libpurple, pidgin +1 moreThe XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ...CVE-2009-3085Fix available5.0 MediumSeptember 8, 2009
pidgin libpurple, pidgin +1 moreThe msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin...CVE-2009-3084Fix available5.0 MediumSeptember 8, 2009
pidgin libpurple, pidgin +1 moreThe msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in...CVE-2009-3083Fix available5.0 MediumSeptember 8, 2009
pidgin libpurple, pidgin +1 morelibpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2...CVE-2009-2703Fix available5.0 MediumSeptember 8, 2009
pidginprotocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not...CVE-2009-3026Fix available5.0 MediumAugust 31, 2009
pidginUnspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service ...CVE-2009-3025Fix available4.3 MediumAugust 31, 2009
adium, pidgin +1 moreThe msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used...CVE-2009-2694Public exploitFix availableEPSS 20.3%10.0 HighAugust 19, 2009
pidginThe OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message...CVE-2009-1889Fix available5.0 MediumJuly 1, 2009
pidginBuffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote...CVE-2009-1374Fix available5.0 MediumMay 26, 2009
pidginMultiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...CVE-2009-1376Public exploitFix availableEPSS 13.3%9.3 HighMay 22, 2009
pidginThe PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly...CVE-2009-1375Fix available5.0 MediumMay 22, 2009
pidginBuffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6...CVE-2009-1373Fix available7.1 HighMay 22, 2009
pidginThe NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it...CVE-2008-3532Fix available6.8 MediumAugust 8, 2008
adium, pidgin +1 moreMultiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...CVE-2008-2927Fix available6.8 MediumJuly 7, 2008
pidginThe UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to...CVE-2008-2957Fix available6.4 MediumJuly 1, 2008
pidginPidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename...CVE-2008-2955Public exploitFix available4.3 MediumJuly 1, 2008
pidgin** DISPUTED ** Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers...CVE-2008-2956Disputed5.0 MediumJuly 1, 2008
pidginlibpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to...CVE-2007-4999Fix available4.3 MediumOctober 29, 2007
pidginlibpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are...CVE-2007-4996Fix available4.3 MediumOctober 1, 2007
pidginUnspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux allows remote authenticated...CVE-2007-38419.0 HighJuly 17, 2007