Vulnerabilities

TI-2010-00266 CVE-2010-0277 · GHSA-rj5f-77wg-8qgv

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4…

LOW 27

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02312 Published 2010-01-09 Fixed CWE-399

TI-2010-00013 CVE-2010-0013 · GHSA-v6ph-x2c7-6g37

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in…

MEDIUM 47

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a ..

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12496 Published 2010-01-09 Fixed CWE-22

TI-2009-03451 CVE-2009-3615 · GHSA-vj8h-wj7f-5mcf

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7…

LOW 28

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02661 Published 2009-10-20 Fixed CWE-399

TI-2008-06878 CVE-2008-7190 · GHSA-86mv-83jj-46wg

Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors…

MEDIUM 45

Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possibly cross-site scripting (XSS).

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01219 Published 2009-09-09 No fix listed

TI-2009-02576 CVE-2009-2694 · GHSA-gg6v-c4q4-582f

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple…

MEDIUM 62

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cau…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.20295 Published 2009-08-20 Fixed CWE-399

TI-2008-02801 CVE-2008-2927 · GHSA-xgwj-qm2p-hcpc

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol…

LOW 37

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04332 Published 2008-07-07 Fixed CWE-189