NVD

Id
13144  
Name
CVE-2010-1624  
Description
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-05-14  
Modified Date
2013-11-02  
Seq
2010-1624  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72561 13144 CVE-2010-1624 http://developer.pidgin.im/viewmtn/revision/diff/884d44222e8c81ecec51c25e07d005e002a5479b/with/894460d22c434e73d60b71ec031611988e687c8b/libpurple/protocols/msn/slp.c  View
72562 13144 CVE-2010-1624 http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8b  View
72563 13144 CVE-2010-1624 oval:org.mitre.oval:def:18547  View
72564 13144 CVE-2010-1624 MDVSA-2010:097  View
72565 13144 CVE-2010-1624 http://www.pidgin.im/news/security/index.php?id=46  View
72566 13144 CVE-2010-1624 RHSA-2010:0788  View
72567 13144 CVE-2010-1624 40138  View
72568 13144 CVE-2010-1624 USN-1014-1  View
72569 13144 CVE-2010-1624 ADV-2010-1141  View
72570 13144 CVE-2010-1624 ADV-2010-2755  View
72571 13144 CVE-2010-1624 pidgin-slp-packets-dos(58559)  View
72572 13144 CVE-2010-1624 https://bugzilla.redhat.com/show_bug.cgi?id=589973  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36523 JVNDB-2010-002303 Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性 Pidgin の libpurple の MSN プロトコルプラグイン内にある slp.c の msn_emoticon_msg 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1624 44204 CVE-2010-1624 13144 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002303.html 2010-05-12 2010-12-20 View