CVE-2011-3184: Pidgin

Medium severity, CVSS 4.3. EPSS: 3.9% chance of exploitation in the next 30 days.

The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.

Affected products

• Pidgin Pidgin: up to and including 2.9.0; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.1.0 only; version 2.1.1 only; …

Published 2011-08-29. Last modified 2026-06-16.