SB2011110402 - Buffer overflow in pidgin.im libpurple

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011110402

SB2011110402 - Buffer overflow in pidgin.im libpurple

Published: November 4, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011110402
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Buffer overflow (CVE-ID: CVE-2011-3594)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.


Remediation

Install update from vendor's website.

References