CVE-2010-0277: Adium

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

Affected products

• Adium Adium: version 1.3.8 only
• Pidgin Pidgin: up to and including 2.6.5; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.1.0 only; version 2.1.1 only; …

Published 2010-01-09. Last modified 2026-06-16.