CVE-2007-4999

MEDIUM 4.3CVE-2007-4999 · Published 29/10/2007 · updated 16/06/2026

In short

CVE-2007-4999 is a MEDIUM (CVSS 4.3) vulnerability affecting pidgin (pidgin).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pidgin pidgin	`= 2.1.0= 2.2.0= 2.2.1`	No fix yet

Description

libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.

References

osvdb.org/38695
secunia.com/advisories/27372 · Patch
secunia.com/advisories/27495
secunia.com/advisories/27858
pidgin.im/news/security · Patch
securityfocus.com/archive/1/483580/100/0/threaded
securityfocus.com/bid/26205
ubuntu.com/usn/usn-548-1
vupen.com/english/advisories/2007/3624
exchange.xforce.ibmcloud.com/vulnerabilities/38132
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18357
redhat.com/archives/fedora-package-announce/2007-November/msg00011.html

More vulnerabilities in pidgin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free