Pidgin Security Advisory

TitleYahoo IM parsing crash
CVE NameCVE-2009-3025
Discovered Byadk
SummaryCrash in Yahoo protocol plugin when receiving an IM
DescriptionPossibly depending on the architecture and/or flags used to compile libpurple, the Yahoo protocol plugin may crash when receiving an IM from any user which contains a URL. The only vulnerable version of libpurple is 2.6.0.
Fixed in Version2.6.1
FixCorrectly parse URLs in incoming Yahoo messages.

Return to Security Advisory Index