Approved changes feed: RSS · Atom

cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*

part: a version: 2.5.8 update: *

VendorPidgin (e9e4ef9f-aef5-56d1-bc60-bddc5cb91920)
ProductPidgin (dbc4cafb-e2db-5133-ac61-70dd7591684b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/pidgin purl2cpe 2026-06-01 10:15:28.235385
pkg:deb/debian/pidgin purl2cpe 2026-06-01 10:15:28.235386
pkg:github/pidgin/pidgin purl2cpe 2026-06-01 10:15:28.235388
pkg:imfreedom/pidgin/pidgin purl2cpe 2026-06-01 10:15:28.235389
pkg:rpm/opensuse/pidgin purl2cpe 2026-06-01 10:15:28.235390
pkg:sourceforge/pidgin purl2cpe 2026-06-01 10:15:28.235392

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0020 vulnerable 2026-06-08 05:05:10.769422 Details available
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T08:58:26.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6490 vulnerable 2026-06-08 05:04:57.177721 Details available
The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.
Published: 2014-02-06T16:00:00.000Z
Updated: 2024-08-06T17:46:22.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6489 vulnerable 2026-06-08 05:04:57.176276 Details available
Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.
Published: 2014-02-06T16:00:00.000Z
Updated: 2024-08-06T17:46:22.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6486 vulnerable 2026-06-08 05:04:57.143470 Details available
gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T17:39:01.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6485 vulnerable 2026-06-08 05:04:57.142102 Details available
Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T17:39:01.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6484 vulnerable 2026-06-08 05:04:57.140647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6483 vulnerable 2026-06-08 05:04:57.139243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6482 vulnerable 2026-06-08 05:04:57.137775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6481 vulnerable 2026-06-08 05:04:57.136366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6479 vulnerable 2026-06-08 05:04:57.121588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6478 vulnerable 2026-06-08 05:04:57.120088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6477 vulnerable 2026-06-08 05:04:57.101423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0274 vulnerable 2026-06-08 05:03:46.694107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0273 vulnerable 2026-06-08 05:03:46.692710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0272 vulnerable 2026-06-08 05:03:46.691166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0271 vulnerable 2026-06-08 05:03:46.671176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6152 vulnerable 2026-06-08 05:02:59.825097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3374 vulnerable 2026-06-08 05:02:09.414451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2318 vulnerable 2026-06-08 05:02:03.428210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2214 vulnerable 2026-06-08 05:00:53.341004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1178 vulnerable 2026-06-08 05:00:48.014733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4939 vulnerable 2026-06-08 04:59:33.926295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4922 vulnerable 2026-06-08 04:59:33.789051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4603 vulnerable 2026-06-08 04:59:32.224576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4602 vulnerable 2026-06-08 04:59:32.223207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4601 vulnerable 2026-06-08 04:59:32.208982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3185 vulnerable 2026-06-08 04:58:10.956299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3184 vulnerable 2026-06-08 04:58:10.954847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2943 vulnerable 2026-06-08 04:58:09.812828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4528 vulnerable 2026-06-08 04:56:28.958784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3711 vulnerable 2026-06-08 04:55:16.529948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2528 vulnerable 2026-06-08 04:55:08.435193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0423 vulnerable 2026-06-08 04:52:02.407970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0420 vulnerable 2026-06-08 04:52:02.400276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0277 vulnerable 2026-06-08 04:52:01.440411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3615 vulnerable 2026-06-08 04:51:43.110139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3085 vulnerable 2026-06-08 04:51:32.320040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3084 vulnerable 2026-06-08 04:51:32.311519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3083 vulnerable 2026-06-08 04:51:32.310416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2703 vulnerable 2026-06-08 04:51:30.150452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.