FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libpurple -- Remote DoS via an MSN OIM message that lacks UTF-8 encoding

Affected packages
libpurple < 2.10.2

Details

VuXML ID 7289214f-7c55-11e1-ab3b-000bcdf0a03b
Discovery 2012-03-15
Entry 2012-04-01

US-CERT reports:

The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.

[source]

References

CVE Name CVE-2012-1178

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.