CVE-2008-2955

Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.

Affected products

Pidgin, Red Hat, Libpurple, Libpurple-Devel, Libpurple-Tcl

Pidgin

= 2.4.1

CVSS 2.0

4.3 MEDIUM

EPSS

7.3% (94th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2008-07-01