Total vulnerabilities in the database
The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
| Software | From | Fixed in |
|---|---|---|
| pidgin / pidgin | - | 2.10.9.x |
| pidgin / pidgin | 2.10.1 | 2.10.1.x |
| pidgin / pidgin | 2.10.8 | 2.10.8.x |
| pidgin / pidgin | 2.10.7 | 2.10.7.x |
| pidgin / pidgin | 2.10.2 | 2.10.2.x |
| pidgin / pidgin | 2.10.5 | 2.10.5.x |
| pidgin / pidgin | 2.10.4 | 2.10.4.x |
| pidgin / pidgin | 2.10.0 | 2.10.0.x |
| pidgin / pidgin | 2.10.6 | 2.10.6.x |
| pidgin / pidgin | 2.10.3 | 2.10.3.x |