Summary
This host has installed with Pidgin and is prone to Denial of Service vulnerability.
Impact
Successful exploitation will allow attacker to crash the affected application, denying service to legitimate users.
Impact Level: Application
Solution
Upgrade to Pidgin version 2.7.11 or later
http://pidgin.im/download
Insight
The flaw is due to a NULL pointer dereference error when processing certain YMSG packets, which can be exploited to crash the process by sending specially crafted YMSG packets.
Affected
Pidgin version prior 2.6.0 through 2.7.10 on Windows
References
Severity
Classification
-
CVE CVE-2011-1091 -
CVSS Base Score: 4.0
AV:N/AC:L/Au:S/C:N/I:N/A:P
Related Vulnerabilities
- Apple Safari JavaScript 'Reload()' DoS Vulnerability - July09
- Firefox 'nsObserverList::FillObserverArray' DOS Vulnerability (Win)
- ClamAV Recursion Level Handling Denial of Service Vulnerability (Windows)
- Dopewars Server 'REQUESTJET' Message Remote Denial of Service Vulnerability
- Firebird SQL 'op_connect_request' Denial Of Service Vulnerability (Win)