VULNERABILITY INTELLIGENCE

CVE-2012-2318

CVSS score5 MEDIUM
EPSS probability1.71%
CISA KEVNot currently listed
Published2012-07-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references