CVE-2010-0423

Published: Feb 24, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.

Affected (29)

Products: Pidgin: Pidgin

Pidgin

1 product

Pidgin

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Pidgin Pidgin	Up to 2.6.5
Pidgin Pidgin	Version 2.0.0
Pidgin Pidgin	Version 2.0.1
Pidgin Pidgin	Version 2.0.2
Pidgin Pidgin	Version 2.1.0
Pidgin Pidgin	Version 2.1.1
Pidgin Pidgin	Version 2.2.0
Pidgin Pidgin	Version 2.2.1
Pidgin Pidgin	Version 2.2.2
Pidgin Pidgin	Version 2.3.0
Pidgin Pidgin	Version 2.3.1
Pidgin Pidgin	Version 2.4.0
Pidgin Pidgin	Version 2.4.1
Pidgin Pidgin	Version 2.4.2
Pidgin Pidgin	Version 2.4.3
Pidgin Pidgin	Version 2.5.0
Pidgin Pidgin	Version 2.5.1
Pidgin Pidgin	Version 2.5.2
Pidgin Pidgin	Version 2.5.3
Pidgin Pidgin	Version 2.5.4
Pidgin Pidgin	Version 2.5.5
Pidgin Pidgin	Version 2.5.6
Pidgin Pidgin	Version 2.5.7
Pidgin Pidgin	Version 2.5.8
Pidgin Pidgin	Version 2.5.9
Pidgin Pidgin	Version 2.6.0
Pidgin Pidgin	Version 2.6.1
Pidgin Pidgin	Version 2.6.2
Pidgin Pidgin	Version 2.6.4

Related CWEs

CWE-399

References (52)

http://developer.pidgin.im/wiki/ChangeLog

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: secalert@redhat.com

http://pidgin.im/news/security/?id=45

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/38563

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38640

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38712

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38915

Source: secalert@redhat.com

http://secunia.com/advisories/39509

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2038

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:041

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:085

Source: secalert@redhat.com

http://www.osvdb.org/62440

Source: secalert@redhat.com

http://www.securityfocus.com/bid/38294

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-902-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0413

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/0914

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1020

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=565792

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/56394

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17554

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9842

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2010-0115.html

Source: secalert@redhat.com

http://developer.pidgin.im/wiki/ChangeLog