CVE-2011-2943 in Pidgin
요약 (영어)
The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response.
예약하다
2011. 07. 27.
공개
2011. 08. 29.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4402 | Pidgin 서비스 거부 | 476 | 정의되지 않음 | 공식 수정 | CVE-2011-2943 |