CVE-2014-3696 in Pidgin
Summary
nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/14/2014
Disclosure
10/29/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68054 | Pidgin User libpurple memory corruption | 119 | Unproven | Official fix | CVE-2014-3696 |