CVE-2007-4999: Input Validation
Published Oct 29, 2007
·Updated
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.
Affected Software
3 affected components
Pidgin Pidgin=2.1.0
Pidgin Pidgin=2.2.0
Pidgin Pidgin=2.2.1
Remediation
Patch Available
Patch Available
Event History
Oct 29, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4999?
The severity of CVE-2007-4999 is classified as a denial of service vulnerability.
2
How do I fix CVE-2007-4999?
To fix CVE-2007-4999, upgrade to Pidgin version 2.2.2 or later.
3
What versions of Pidgin are affected by CVE-2007-4999?
CVE-2007-4999 affects Pidgin versions 2.1.0, 2.2.0, and 2.2.1.
4
What type of attack does CVE-2007-4999 exploit?
CVE-2007-4999 exploits a remote denial of service attack through invalid HTML data.
5
What happens when CVE-2007-4999 is triggered?
When CVE-2007-4999 is triggered, it causes a NULL dereference leading to application crash.