CVE-2007-4996
EPSS 1.7%Published: 10/1/2007Modified: 4/28/2026
Also known as:DEBIAN-CVE-2007-4996
Description
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."
Affected packages (1)
- Debian/pidginfrom 0, < 2.2.1-1