CVE-2011-3184

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses…

published August 29, 2011

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03858 · 90.1th percentile
Published
2011-08-29T17:00Z
EPSS history
Timeline
  • 29 AUG 17:00Z
    The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses…
    cvelistv5