CVE-2013-6481

libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo!

published February 6, 2014

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03913 · 90.3th percentile
Published
2014-02-06T16:00Z
EPSS history
Timeline
  • 06 FEB 16:00Z
    libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo!
    cvelistv5