Pidgin DoS Vulnerability (CVE-2014-3695)

Pidgin DoS Vulnerability (CVE-2014-3695)

Release date:
Updated on:

Affected Systems:
Pidgin <2.10.10
Pidgin
Description:
Bugtraq id: 70702
CVE (CAN) ID: CVE-2014-3695

Pidgin is a multi-in-One world mainstream instant messaging software integration tool.

When Pidgin parses malformed MXit emojis, libpurple has a denial of service vulnerability due to a large length of emojis sent by malicious servers or man-in-the-middle attackers, attackers can exploit this vulnerability to cause the affected applications to crash.

<* Source: Richard Johnson
Yves Younan
*>

Suggestion:
Vendor patch:

Pidgin
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://pidgin.im/news/security? Id = 87
Http://hg.pidgin.im/pidgin/main/rev/2e4475087f04

This article permanently updates the link address: