CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."

Read the notes from the security team

• How can I get the fixes?
• What do statuses mean?

Notes

References

• MITRE
• NVD
• Launchpad
• Debian

Other references

• http://developer.pidgin.im/viewmtn/revision/diff/f7687aed5d4c60018282a0629b67556f506ceb54/with/a5dd91b5d76972cf72a56209503c7e32d71c6e3c/libpurple/protocols/msn/switchboard.c
• https://www.cve.org/CVERecord?id=CVE-2007-4996