CVE-2008-3532: Pidgin

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.

Affected products

• Pidgin Pidgin: version 2.4.3 only

Published 2008-08-08. Last modified 2026-06-16.