CVE - CVE-2011-3594

CVE-ID
CVE-2011-3594	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://developer.pidgin.im/viewmtn/revision/diff/be5e66abad2af29604bc794cc4c6600ab12751f3/with/7eb1f6d56cc58bbb5b56b7df53955d36b9b419b8 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=743481 CONFIRM:http://developer.pidgin.im/ticket/14636 CONFIRM:http://pidgin.im/news/security/?id=56 MANDRIVA:MDVSA-2011:183 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 REDHAT:RHSA-2011:1371 URL:http://www.redhat.com/support/errata/RHSA-2011-1371.html OVAL:oval:org.mitre.oval:def:18034 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18034 SECUNIA:46376 URL:http://secunia.com/advisories/46376
Assigning CNA
N/A
Date Entry Created
20110921	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110921)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org