CVE-2010-4528 | Vulnetix

CVE-2010-4528 PUBLISHED CVSS 4 MEDIUM

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session.

EPSS 2.55% · 84.9th percentile

Risk Scores

CVSS 2.0

EPSS Score

2.55%

84.9th percentile

Affected Products

Vendor	Product	Versions
pidgin	libpurple	2.7.6, 2.7.7, 2.7.8
n/a	n/a	n/a
pidgin	pidgin	2.1.1, 2.2.0, 2.2.1

Timeline

Jan 7, 2011 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 21, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Oct 28, 2022 EPSS Score
Dec 20, 2022 EPSS Score
Feb 11, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 28, 2023 EPSS Score
Jul 20, 2023 EPSS Score
Sep 11, 2023 EPSS Score

References

http://www.pidgin.im/news/security/?id=49 url
oval:org.mitre.oval:def:18461 vdb
ADV-2011-0028 vdb
[support] 20101227 Pidgin 2.7.9 released mailing-list
FEDORA-2010-19314 vendor-advisory
FEDORA-2010-19317 vendor-advisory
SUSE-SR:2011:001 vendor-advisory
http://developer.pidgin.im/viewmtn/revision/diff/e76f4ad4ef2f10588195a0eedc7a08f82062f79c/with/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031/libpurple/protocols/msn/directconn.c url
42824 third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-4528 advisory
http://developer.pidgin.im/viewmtn/revision/info/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031 url
http://secunia.com/advisories/42732 url
http://www.openwall.com/lists/oss-security/2010/12/27/1 url
http://www.openwall.com/lists/oss-security/2010/12/31/5 url
http://www.securityfocus.com/bid/45581 url
http://www.vupen.com/english/advisories/2011/0054 url
http://secunia.com/advisories/42877 technical
http://www.mandriva.com/security/advisories?name=MDVSA-2010:259 technical
http://www.vupen.com/english/advisories/2011/0076 technical
https://bugzilla.redhat.com/show_bug.cgi?id=665421 technical

Open in Interactive Console →