PT-2010-2192 · Pidgin+1 · Pidgin+1

Sadrul Habib Chowdhury

·

Publicado

2010-02-18

·

Atualizado

2017-09-19

·

CVE-2010-0420

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.6.6
Description The issue is related to the parsing of nicknames in XMPP multi-user chat rooms. When a nickname contains a specific sequence, it can cause the application to crash, resulting in a denial of service. This is due to the improper parsing of nicknames containing <br> sequences.
Recommendations For versions prior to 2.6.6, update to version 2.6.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of nicknames containing <br> sequences in XMPP multi-user chat rooms to minimize the risk of exploitation.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-0420
DSA-2038-1
OPENSUSE-SU-2024:10432-1
RHSA-2010:0115
RHSA-2010_0115

Produtos afetados

Pidgin
Red Hat