Security Advisory

CVE-2011-4602

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-12-17 02:00:00
Last updated 2024-08-07 00:09:19
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application crash) via a crafted message.