VULNERABILITY INTELLIGENCE
CVE-2012-2214
CVSS score3.5 LOW
EPSS probability2.20%
CISA KEVNot currently listed
Published2012-07-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:N/A:P
Description
proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.
Primary references
- cve@mitre.org — Patch
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108