Pidgin XMPP protocol File Transfer Request Processing Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Pidgin <2.10.4
Unaffected system:
Pidgin 2.10.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53706
Cve id: CVE-2012-2214

Pidgin is a multi-in-One world mainstream instant messaging software integration tool.

In versions earlier than Pidgin 2.10.4, when processing a series of specially crafted file transfer requests, the client references invalid memory. After receiving one of the file transfer requests, the affected applications may crash.

<* Source: Jos é Valent í n gtoutié rrez

Link: http://www.pidgin.im/news/security? Id = 62

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Pidgin
------
Pidgin has released a Security Bulletin (CVE-2012-2214) and patches for this:

CVE-2012-2214: XMPP remote crash

Link: http://www.pidgin.im/news/security? Id = 62