Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
2014-02-06T17:00:05.650
2025-04-11T00:51:21.963
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | pidgin | pidgin | ≤ 2.10.7 | Yes |
| Application | pidgin | pidgin | 2.0.0 | Yes |
| Application | pidgin | pidgin | 2.0.1 | Yes |
| Application | pidgin | pidgin | 2.0.2 | Yes |
| Application | pidgin | pidgin | 2.0.2 | Yes |
| Application | pidgin | pidgin | 2.1.0 | Yes |
| Application | pidgin | pidgin | 2.1.1 | Yes |
| Application | pidgin | pidgin | 2.10.0 | Yes |
| Application | pidgin | pidgin | 2.10.1 | Yes |
| Application | pidgin | pidgin | 2.10.2 | Yes |
| Application | pidgin | pidgin | 2.10.3 | Yes |
| Application | pidgin | pidgin | 2.10.4 | Yes |
| Application | pidgin | pidgin | 2.10.5 | Yes |
| Application | pidgin | pidgin | 2.10.6 | Yes |