CVE-2013-0274 | BDVDB-2026-54644 Detail
Description#
upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
- http://www.pidgin.im/news/security/?id=68
- http://www.ubuntu.com/usn/USN-1746-1
- http://hg.pidgin.im/pidgin/main/rev/ad7e7fb98db3
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18221
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.