Input Validation and Logic

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers…CVE-2008-2955Pidgin · 7.3% likely

   CWE-20

2. The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer…CVE-2010-1624Pidgin · 5.6% likely

   CWE-20

3. gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.CVE-2011-3185Pidgin · 4.8% likely

   CWE-20

4. family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to…CVE-2011-4601Pidgin · 4.5% likely

   CWE-20

5. The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq reques…CVE-2013-6483Pidgin · 3.9% likely

   CWE-20

6. gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled d…CVE-2013-6486Pidgin · 3.8% likely

   CWE-20

7. gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denia…CVE-2013-6478Pidgin · 3.8% likely

   CWE-20

8. The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application cras…CVE-2012-6152Pidgin · 3.8% likely

   CWE-20

9. The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which a…CVE-2011-4603Pidgin · 3.6% likely

   CWE-20

10. The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers t…CVE-2011-4602Pidgin · 3.6% likely

    CWE-20

11. libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of ser…CVE-2010-3711Pidgin · 3.3% likely

    CWE-20

12. libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing <br> sequences, which allows remote attack…CVE-2010-0420Pidgin · 2.9% likely

    CWE-20

13. The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) vi…CVE-2014-0020Pidgin · 2.7% likely

    CWE-20

14. directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer derefe…CVE-2010-4528Pidgin · 2.5% likely

    CWE-20

15. The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attack…CVE-2009-3084Pidgin · 2.5% likely

    CWE-20

16. Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Cont…CVE-2013-6482Pidgin · 2.3% likely

    CWE-20

17. The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash)…CVE-2013-6484Pidgin · 2.2% likely

    CWE-20

18. The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or di…CVE-2008-2957Pidgin · 2.1% likely

    CWE-20

19. libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that…CVE-2007-4999Pidgin · 1.8% likely

    CWE-20

20. msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (applic…CVE-2012-2318Pidgin · 1.7% likely

    CWE-20

21. Pidgin 2.13.0 Denial of Service via Malformed UsernameCVE-2019-25544Pidgin · CVSS 6.2 · 0.2% likely

    CWE-807

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.