Pidgin 2.6.3
Approved changes feed: RSS · Atom
cpe:2.3:a:pidgin:pidgin:2.6.3:*:*:*:*:*:*:*
part: a version: 2.6.3 update: *
| Vendor | Pidgin (e9e4ef9f-aef5-56d1-bc60-bddc5cb91920) |
|---|---|
| Product | Pidgin (dbc4cafb-e2db-5133-ac61-70dd7591684b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/pidgin |
purl2cpe | 2026-06-01 10:15:28.235426 |
pkg:deb/debian/pidgin |
purl2cpe | 2026-06-01 10:15:28.235427 |
pkg:github/pidgin/pidgin |
purl2cpe | 2026-06-01 10:15:28.235428 |
pkg:imfreedom/pidgin/pidgin |
purl2cpe | 2026-06-01 10:15:28.235430 |
pkg:rpm/opensuse/pidgin |
purl2cpe | 2026-06-01 10:15:28.235431 |
pkg:sourceforge/pidgin |
purl2cpe | 2026-06-01 10:15:28.235432 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0020 |
vulnerable | 2026-06-08 05:05:10.772071 |
Details available
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T08:58:26.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6490 |
vulnerable | 2026-06-08 05:04:57.177798 |
Details available
The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.
Published: 2014-02-06T16:00:00.000Z
Updated: 2024-08-06T17:46:22.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6489 |
vulnerable | 2026-06-08 05:04:57.176358 |
Details available
Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.
Published: 2014-02-06T16:00:00.000Z
Updated: 2024-08-06T17:46:22.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6486 |
vulnerable | 2026-06-08 05:04:57.143551 |
Details available
gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T17:39:01.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6485 |
vulnerable | 2026-06-08 05:04:57.142187 |
Details available
Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
Published: 2014-02-06T15:00:00.000Z
Updated: 2024-08-06T17:39:01.446Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6484 |
vulnerable | 2026-06-08 05:04:57.140724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6483 |
vulnerable | 2026-06-08 05:04:57.139321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6482 |
vulnerable | 2026-06-08 05:04:57.137922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6481 |
vulnerable | 2026-06-08 05:04:57.136448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6479 |
vulnerable | 2026-06-08 05:04:57.121670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6478 |
vulnerable | 2026-06-08 05:04:57.120177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6477 |
vulnerable | 2026-06-08 05:04:57.104476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6152 |
vulnerable | 2026-06-08 05:02:59.828278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1178 |
vulnerable | 2026-06-08 05:00:48.017927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4939 |
vulnerable | 2026-06-08 04:59:33.926385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4603 |
vulnerable | 2026-06-08 04:59:32.224742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4602 |
vulnerable | 2026-06-08 04:59:32.223293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4601 |
vulnerable | 2026-06-08 04:59:32.211861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.