CVE-2011-4601

family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows…

published December 25, 2011

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04528 · 91.5th percentile
Published
2011-12-25T01:00Z
EPSS history
Timeline
  • 25 DEC 01:00Z
    family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows…
    cvelistv5