Pidgin XMPP protocol access rejection Vulnerability

Release date:
Updated on: 2012-03-19

Affected Systems:
Pidgin 2.x
Unaffected system:
Pidgin 2.10.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52476
CVE (CAN) ID: CVE-2011-4939

Pidgin is a multi-in-One world mainstream instant messaging software integration tool.

In versions earlier than Pidgin 2.10.2, the function pidgin_conv_chat_rename_user in gtkconv. c has a security vulnerability. You can change the nickname in the XMPP chat room to cause DOS.

<* Source: Clemens Huebner

Link: http://developer.pidgin.im/ticket/14392
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Pidgin
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://pidgin.im/pidgin/home/