CVE-2011-4603

The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on…

published December 17, 2011

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted message, a different vulnerability than CVE-2011-3594.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03600 · 89.3th percentile
Published
2011-12-17T02:00Z
EPSS history
Timeline
  • 17 DEC 02:00Z
    The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on…
    cvelistv5