CVE-2013-6479

Description

util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.

Affected packages (1)

• Debian/pidginfrom 0, < 2.10.8-1

References (1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-6479