CVE-2007-4999 Null dereference in n/a
Remote attackers can crash Pidgin via invalid HTML in messages when HTML logging is enabled, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-4999?
CVE-2007-4999 is a medium-severity vulnerability in Pidgin Pidgin, published on 29 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.
Weakness: CWE-20
Which versions are affected by CVE-2007-4999?
It affects 1 product.
Products include Pidgin Pidgin.
How do I fix CVE-2007-4999?
Upgrade to a fixed version.
Is CVE-2007-4999 being exploited?
There is no known exploitation of CVE-2007-4999 in the wild and no public exploit code.
Other vulnerabilities in Pidgin Pidgin
Sources
Also known as DEBIAN-CVE-2007-4999, GHSA-qcj3-h9mr-5c65.