CVE-2007-4996: Medium severity Pidgin Pidgin vulnerability
Published Oct 1, 2007
·Updated
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."
Affected Software
1 affected component
Pidgin Pidgin=2.2.0
Remediation
Patch Available
Patch Available
Event History
Oct 1, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4996?
CVE-2007-4996 is considered a medium severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2007-4996?
To fix CVE-2007-4996, upgrade Pidgin to version 2.2.1 or later.
3
What software is affected by CVE-2007-4996?
CVE-2007-4996 affects Pidgin versions prior to 2.2.1, specifically version 2.2.0.
4
What type of attack does CVE-2007-4996 enable?
CVE-2007-4996 allows remote attackers to execute a denial of service attack by sending malformed MSN nudge messages.
5
Can CVE-2007-4996 lead to data loss?
While CVE-2007-4996 primarily causes a crash, it may lead to loss of unsaved data in the application.