NVD

Id
15068  
Name
CVE-2010-3711  
Description
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-10-27  
Modified Date
2013-11-02  
Seq
2010-3711  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84324 15068 CVE-2010-3711 http://developer.pidgin.im/viewmtn/revision/info/b01c6a1f7fe4d86b83f5f10917b3cb713989cfcc  View
84325 15068 CVE-2010-3711 FEDORA-2010-16629  View
84326 15068 CVE-2010-3711 FEDORA-2010-17130  View
84327 15068 CVE-2010-3711 FEDORA-2010-16876  View
84328 15068 CVE-2010-3711 oval:org.mitre.oval:def:18506  View
84329 15068 CVE-2010-3711 http://pidgin.im/news/security/?id=48  View
84330 15068 CVE-2010-3711 1024623  View
84331 15068 CVE-2010-3711 SSA:2010-305-02  View
84332 15068 CVE-2010-3711 MDVSA-2010:208  View
84333 15068 CVE-2010-3711 RHSA-2010:0788  View
84334 15068 CVE-2010-3711 RHSA-2010:0890  View
84335 15068 CVE-2010-3711 44283  View
84336 15068 CVE-2010-3711 USN-1014-1  View
84337 15068 CVE-2010-3711 ADV-2010-2753  View
84338 15068 CVE-2010-3711 ADV-2010-2754  View
84339 15068 CVE-2010-3711 ADV-2010-2755  View
84340 15068 CVE-2010-3711 ADV-2010-2847  View
84341 15068 CVE-2010-3711 ADV-2010-2851  View
84342 15068 CVE-2010-3711 ADV-2010-2870  View
84343 15068 CVE-2010-3711 pidgin-purplebase64decode-dos(62708)  View
84344 15068 CVE-2010-3711 https://bugzilla.redhat.com/show_bug.cgi?id=641921  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36524 JVNDB-2010-002304 Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 Pidgin の libpurple には、purple_base64_decode の戻り値を適切に検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3711 46291 CVE-2010-3711 15068 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002304.html 2010-05-12 2010-12-07 View