CVE-2012-2318: Input Validation
Published Jul 3, 2012
·Updated
msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.
Affected Software
48 affected components
Pidgin Pidgin<=2.10.3
Pidgin Pidgin=2.0.0
Pidgin Pidgin=2.0.1
Pidgin Pidgin=2.0.2
Pidgin Pidgin=2.1.0
Pidgin Pidgin=2.1.1
Pidgin Pidgin=2.2.0
Pidgin Pidgin=2.2.1
Pidgin Pidgin=2.2.2
Pidgin Pidgin=2.3.0
Pidgin Pidgin=2.3.1
Pidgin Pidgin=2.4.0
Pidgin Pidgin=2.4.1
Pidgin Pidgin=2.4.2
Pidgin Pidgin=2.4.3
Pidgin Pidgin=2.5.0
Pidgin Pidgin=2.5.1
Pidgin Pidgin=2.5.2
Pidgin Pidgin=2.5.3
Pidgin Pidgin=2.5.4
Pidgin Pidgin=2.5.5
Pidgin Pidgin=2.5.6
Pidgin Pidgin=2.5.7
Pidgin Pidgin=2.5.8
Pidgin Pidgin=2.5.9
Pidgin Pidgin=2.6.0
Pidgin Pidgin=2.6.1
Pidgin Pidgin=2.6.2
Pidgin Pidgin=2.6.4
Pidgin Pidgin=2.6.5
Pidgin Pidgin=2.6.6
Pidgin Pidgin=2.7.0
Pidgin Pidgin=2.7.1
Pidgin Pidgin=2.7.2
Pidgin Pidgin=2.7.3
Pidgin Pidgin=2.7.4
Pidgin Pidgin=2.7.5
Pidgin Pidgin=2.7.6
Pidgin Pidgin=2.7.7
Pidgin Pidgin=2.7.8
Pidgin Pidgin=2.7.9
Pidgin Pidgin=2.7.10
Pidgin Pidgin=2.7.11
Pidgin Pidgin=2.8.0
Pidgin Pidgin=2.9.0
Pidgin Pidgin=2.10.0
Pidgin Pidgin=2.10.1
Pidgin Pidgin=2.10.2
Remediation
Patch Available
Patch Available
Event History
Jul 3, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2318?
CVE-2012-2318 has a severity level that can cause denial of service due to application crashes.
2
How do I fix CVE-2012-2318?
To fix CVE-2012-2318, upgrade Pidgin to version 2.10.4 or later.
3
Which versions of Pidgin are affected by CVE-2012-2318?
Versions of Pidgin prior to 2.10.4 are affected by CVE-2012-2318.
4
What type of vulnerability is CVE-2012-2318?
CVE-2012-2318 is a denial of service vulnerability caused by improper handling of crafted characters.
5
Can CVE-2012-2318 be exploited remotely?
Yes, CVE-2012-2318 can be exploited remotely by sending specially crafted messages to the Pidgin client.