VULNERABILITY INTELLIGENCE

CVE-2013-0274

CVSS score2.9 LOW
EPSS probability1.35%
CISA KEVNot currently listed
Published2013-02-16
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:N/C:N/I:N/A:P

Description

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.

Primary references