NVD

Id
13986  
Name
CVE-2010-2528  
Description
The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-30  
Modified Date
2013-11-02  
Seq
2010-2528  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77461 13986 CVE-2010-2528 http://developer.pidgin.im/viewmtn/revision/diff/fcb70f7c12120206d30ad33223ff85be7b226d1c/with/8e8ff246492e45af8f8d0808296d6f2906794dc0/libpurple/protocols/oscar/family_icbm.c  View
77462 13986 CVE-2010-2528 http://developer.pidgin.im/viewmtn/revision/info/8e8ff246492e45af8f8d0808296d6f2906794dc0  View
77463 13986 CVE-2010-2528 oval:org.mitre.oval:def:18359  View
77464 13986 CVE-2010-2528 SSA:2010-240-05  View
77465 13986 CVE-2010-2528 http://www.pidgin.im/news/security/index.php?id=47  View
77466 13986 CVE-2010-2528 41881  View
77467 13986 CVE-2010-2528 ADV-2010-1887  View
77468 13986 CVE-2010-2528 ADV-2010-2221  View
77469 13986 CVE-2010-2528 pidgin-xstatus-dos(60566)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36784 JVNDB-2010-002564 Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性 Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2528 45108 CVE-2010-2528 13986 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002564.html 2010-07-30 2011-01-04 View