Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.

Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.

finch-2.11.0-4.1 on GA media

pidgin: DoS when decoding non-UTF-8 strings in Yahoo protocol plugin pidgin: DoS when handling timestamps in the XMPP plugin pidgin: DoS when rendering long URLs pidgin: DoS when parsing certain HTTP response headers pidgin: DoS caused due to OOB read in Yahoo protocol plugin pidgin: DoS via multiple null pointer dereferences in MSN protocol plugin pidgin: Possible spoofing using iq replies in XMPP protocol plugin pidgin: DoS via specially-crafted stun messages pidgin: Heap-based buffer overflow when parsing chunked HTTP responses pidgin: Heap-based buffer overflow in Gadu-Gadu protocol plugin pidgin: Heap-based buffer overflow in MXit emoticon parsing pidgin: Heap-based buffer overflow in SIMPLE protocol plugin pidgin: DoS in IRC protocol plugin due to arguement parsing