CVE-2008-2955: Input Validation
Published Jul 1, 2008
·Updated
Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msnslplinkprocessmsg function.
Affected Software
1 affected component
Pidgin Pidgin=2.4.1
Event History
Jul 1, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2955?
CVE-2008-2955 is classified as a denial of service vulnerability.
2
How does CVE-2008-2955 exploit occur?
CVE-2008-2955 exploits occur when remote attackers send a long filename through MSN messages that causes Pidgin to crash.
3
Which versions of Pidgin are affected by CVE-2008-2955?
CVE-2008-2955 specifically affects Pidgin version 2.4.1.
4
How do I fix CVE-2008-2955?
To mitigate CVE-2008-2955, you should upgrade to a newer version of Pidgin beyond 2.4.1.
5
What are the potential impacts of CVE-2008-2955?
The potential impacts of CVE-2008-2955 include application crashes and disruption of service for users of Pidgin.