CVE-2013-6478
CVE-2013-6478
This page contains facts from public vulnerability sources. Check the original advisory before updating.
gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (application crash) via a long URL that is examined with a tooltip.
EPSS 3.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html
- https://rhn.redhat.com/errata/RHSA-2014-0139.html
- http://www.debian.org/security/2014/dsa-2859
- http://pidgin.im/pipermail/support/2013-March/012981.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html
- http://pidgin.im/news/security/?id=72
- http://hg.pidgin.im/pidgin/main/rev/2bb66ef1475e
- http://pidgin.im/pipermail/support/2013-March/012980.html
- http://www.ubuntu.com/usn/USN-2100-1
- https://nvd.nist.gov/vuln/detail/CVE-2013-6478