Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pidgin‘libpurple/protocols/yahoo/libymsg.c’文件缓冲区溢出漏洞
Vulnerability Description
Pidgin是一款跨平台的实时通信客户端,它支持多个常用的实时通信协议,用户可用同一个软件登录不同的实时通信服务。 Pidgin 2.10.7及之前的版本中的libpurple/protocols/yahoo/libymsg.c文件中存在缓冲区溢出漏洞,该漏洞源于Yahoo!协议插件没有正确验证‘length’字段。远程攻击者可利用该漏洞造成拒绝服务(崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A