NVD

Id
9651  
Name
CVE-2011-2943  
Description
The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-08-29  
Modified Date
2013-11-02  
Seq
2011-2943  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55227 9651 CVE-2011-2943 http://developer.pidgin.im/viewmtn/revision/diff/5749f9193063800d27bef75c2388f6f9cc2f7f37/with/5c2dba4a7e2e76b76e7f472b88953a4316706d43/libpurple/protocols/irc/msgs.c  View
55228 9651 CVE-2011-2943 http://developer.pidgin.im/viewmtn/revision/info/5c2dba4a7e2e76b76e7f472b88953a4316706d43  View
55229 9651 CVE-2011-2943 oval:org.mitre.oval:def:18005  View
55230 9651 CVE-2011-2943 http://pidgin.im/news/security/?id=53  View
55231 9651 CVE-2011-2943 1025961  View
55232 9651 CVE-2011-2943 [oss-security] 20110820 CVE request: Pidgin crash  View
55233 9651 CVE-2011-2943 [oss-security] 20110822 Re: CVE request: Pidgin crash  View
55234 9651 CVE-2011-2943 49268  View
55235 9651 CVE-2011-2943 pidgin-irc-protocol-dos(69340)  View
55236 9651 CVE-2011-2943 https://bugzilla.redhat.com/show_bug.cgi?id=722939  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34596 JVNDB-2011-004838 libpurple の irc_msg_who 関数におけるサービス運用妨害 (DoS) の脆弱性 libpurple の IRC プロトコルプラグインの msgs.c の irc_msg_who 関数はニックネームの文字を適切に検証しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-2943 50850 CVE-2011-2943 9651 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004838.html 2011-08-20 2012-09-28 View