Pidgin CVE-2014-3696 Denial of Service Vulnerability

Bugtraq ID:	70705
Class:	Design Error
CVE:	CVE-2014-3696
Remote:	Yes
Local:	No
Published:	Oct 22 2014 12:00AM
Updated:	Apr 13 2015 09:52PM
Credit:	Yves Younan and Richard Johnson of Cisco Talos
Vulnerable:	Pidgin Pidgin 2.10.9 Pidgin Pidgin 2.10.5 Pidgin Pidgin 2.10.4 Pidgin Pidgin 2.10.3 Pidgin Pidgin 2.10.2 Pidgin Pidgin 2.10.1 Pidgin Pidgin 2.9 Pidgin Pidgin 2.8 Pidgin Pidgin 2.7.10 Pidgin Pidgin 2.7.7 Pidgin Pidgin 2.7.6 Pidgin Pidgin 2.7.5 Pidgin Pidgin 2.7.4 Pidgin Pidgin 2.7.3 Pidgin Pidgin 2.7.2 Pidgin Pidgin 2.7.1 Pidgin Pidgin 2.7 Pidgin Pidgin 2.6.6 Pidgin Pidgin 2.6.5 Pidgin Pidgin 2.6.4 Pidgin Pidgin 2.6.3 Pidgin Pidgin 2.6.1 Pidgin Pidgin 2.6 Pidgin Pidgin 2.5.9 Pidgin Pidgin 2.5.8 Pidgin Pidgin 2.5.7 Pidgin Pidgin 2.5.6 Pidgin Pidgin 2.5.5 Pidgin Pidgin 2.4.3 Pidgin Pidgin 2.4.2 Pidgin Pidgin 2.4.1 Pidgin Pidgin 2.4 Pidgin Pidgin 2.2.2 Pidgin Pidgin 2.2.1 Pidgin Pidgin 2.2 Pidgin Pidgin 2.1 Pidgin Pidgin 2.0.2 Pidgin Pidgin 2.0 Pidgin Pidgin 2.7.9 Pidgin Pidgin 2.7.8 Pidgin Pidgin 2.7.11 Pidgin Pidgin 2.6.2 Pidgin Pidgin 2.5.4 Pidgin Pidgin 2.5.3 Pidgin Pidgin 2.5.2 Pidgin Pidgin 2.5.1 Pidgin Pidgin 2.5.0 Pidgin Pidgin 2.3.1 Pidgin Pidgin 2.3.0 Pidgin Pidgin 2.10.8 Pidgin Pidgin 2.10.7 Pidgin Pidgin 2.10.6 Pidgin Pidgin 2.10.0 Pidgin Pidgin 2.1.1 Pidgin Pidgin 2.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Pidgin Pidgin 2.10.10

Pidgin CVE-2014-3696 Denial of Service Vulnerability

Pidgin is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users.

Pidgin CVE-2014-3696 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.