[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnrMJvpl6h6h62H-PP8c-1lkv8Wfi3E9tzFZVZLMFxHo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":94,"topProductsByCves":95,"seoMetadata":99,"meta":108},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":31},24815,"pidgin",3,90,0,120,"2022-06-02","p",[16,20,26],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},129085,73,89,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},129083,"libpurple",47,7,"2011-11-04",{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},129084,"mxit",1,"2017-03-29","Pidgin is a technology vendor with 3 tracked products and 90 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[33,42,47,53,61,65,72,77,84,89],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":41},"CVE-2009-2694","The msn_slplink_process_msg function in libpurple\u002Fprotocols\u002Fmsn\u002Fslplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.","2009-08-21",10,"v2","Critical",false,0.20295,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":46},"CVE-2013-6490","The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.","2014-02-06",0.14809,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":52},"CVE-2009-1376","Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple\u002Fprotocols\u002Fmsn\u002Fslplink.c and (2) libpurple\u002Fprotocols\u002Fmsnp9\u002Fslplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.","2009-05-26",9.3,0.13294,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":40,"epssScore":60},"CVE-2010-0013","Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application\u002Fx-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text\u002Fx-mms-emoticon message that announced availability of the emoticon.","2010-01-09",7.5,"v3.1","High",0.12496,{"cveId":62,"description":63,"publishedDate":45,"cvssScore":57,"cvssVersion":38,"severity":59,"isKev":40,"epssScore":64},"CVE-2013-6487","Integer overflow in libpurple\u002Fprotocols\u002Fgg\u002Flib\u002Fhttp.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.",0.08174,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":38,"severity":70,"isKev":40,"epssScore":71},"CVE-2008-2955","Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.","2008-07-01",4.3,"Medium",0.07258,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":57,"cvssVersion":38,"severity":59,"isKev":40,"epssScore":76},"CVE-2012-3374","Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.","2012-07-07",0.06402,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":82,"severity":39,"isKev":40,"epssScore":83},"CVE-2017-2640","An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.","2018-07-27",9.8,"v3.0",0.06179,{"cveId":85,"description":86,"publishedDate":45,"cvssScore":87,"cvssVersion":38,"severity":70,"isKev":40,"epssScore":88},"CVE-2013-6489","Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.",5,0.0581,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":87,"cvssVersion":38,"severity":70,"isKev":40,"epssScore":93},"CVE-2010-1624","The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.","2010-05-14",0.05586,[],[96,97,98],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Pidgin - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pidgin covering 3 products with 90 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pidgin vulnerabilities, Pidgin security, Pidgin CVE, Pidgin threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107},"https:\u002F\u002Fschema.org","Organization","Pidgin","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpidgin",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":109,"apiVersion":110},"2026-10-18T18:05:42.814Z","3.0"]