4.3

CVE-2007-4996

EPSS 1.65%
Veröffentlicht 01.10.2007 20:17:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pidgin ≫ Pidgin Version2.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.65%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://fedoranews.org/updates/FEDORA-2007-236.shtml

http://secunia.com/advisories/27010

Patch

Vendor Advisory

http://secunia.com/advisories/27088

http://www.pidgin.im/news/security/?id=23

Patch

http://www.securityfocus.com/archive/1/481402/100/0/threaded

http://www.securityfocus.com/bid/25872

http://www.vupen.com/english/advisories/2007/3321

https://exchange.xforce.ibmcloud.com/vulnerabilities/36884

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18261

https://nvd.nist.gov/vuln/detail/CVE-2007-4996

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-4996

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-4996

EUVD