CVE-2010-0423: Medium severity Pidgin Pidgin vulnerability
gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
Other sources
Pidgin 2.6.6 is fixing a denial of service (remotely-triggered high CPU use) triggered by large amount of "smileys" in received instant messages. This issue is addressed by setting a limit on number of smileys processed.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0423?
The severity of CVE-2010-0423 is considered high due to its potential for causing denial of service by excessive CPU consumption.
How do I fix CVE-2010-0423?
To fix CVE-2010-0423, upgrade Pidgin to version 2.6.6 or later.
What versions of Pidgin are affected by CVE-2010-0423?
CVE-2010-0423 affects Pidgin versions prior to 2.6.6, including versions from 2.0.0 up to 2.6.5.
Can CVE-2010-0423 be exploited remotely?
Yes, CVE-2010-0423 can be exploited remotely by sending numerous emoticons in instant messages or chats.
What type of vulnerability is CVE-2010-0423?
CVE-2010-0423 is classified as a denial of service vulnerability.