CVE-2011-1091: Null Pointer Dereference
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
Other sources
Multiple NULL pointer dereference flaws were found in the way Yahoo protocol plug-in of the Pidgin instant messaging client handled malformed YMSG packets (SMS messages and notification packets). A remote, authenticated user could use this flaw to cause denial of service (Pidgin crash) via specially-crafted notification message. The SMS messages handling issue is exploitable only via specially-crafted SMS message, sent from remote, malicious Yahoo server.
Acknowledgements:
Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Marius Wachtler as the original reporter.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1091?
CVE-2011-1091 has been classified as a high severity vulnerability due to its potential to cause denial of service via a NULL pointer dereference.
How do I fix CVE-2011-1091?
To fix CVE-2011-1091, you should upgrade to a version of Pidgin that is newer than 2.7.10, as the vulnerability has been addressed in subsequent releases.
What software is affected by CVE-2011-1091?
CVE-2011-1091 affects Pidgin versions 2.6.0 through 2.7.10 using the Yahoo! protocol plugin.
Can CVE-2011-1091 be exploited remotely?
Yes, CVE-2011-1091 can be exploited remotely by authenticated users or malicious Yahoo! servers.
What are the consequences of CVE-2011-1091 exploitation?
Exploitation of CVE-2011-1091 can lead to application crashes and denial of service for Pidgin users.