tocsin

Debian/pidgin: high 7.5

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/

Action: Upgrade pidgin to 2.6.5-1 or later.

Affected

introducedfixedlast affected
02.6.5-1-

Fixed versions

2.6.5-1

Sources

published · modified · JSON