Unrated severityNVD Advisory· Published Oct 29, 2007· Updated Apr 23, 2026
CVE-2007-4999
CVE-2007-4999
Description
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.
Affected products
3cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- secunia.com/advisories/27372nvdPatchVendor Advisory
- www.pidgin.im/news/security/nvdPatch
- osvdb.org/38695nvd
- secunia.com/advisories/27495nvd
- secunia.com/advisories/27858nvd
- www.securityfocus.com/archive/1/483580/100/0/threadednvd
- www.securityfocus.com/bid/26205nvd
- www.ubuntu.com/usn/usn-548-1nvd
- www.vupen.com/english/advisories/2007/3624nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/38132nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18357nvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00011.htmlnvd
News mentions
0No linked articles in our index yet.