CVE-2011-4939: Pidgin

Medium severity, CVSS 6.4. EPSS: 3.5% chance of exploitation in the next 30 days.

The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nickname while in an XMPP chat room.

Affected products

• Pidgin Pidgin: up to and including 2.10.1; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.1.0 only; version 2.1.1 only; …

Published 2012-03-15. Last modified 2026-06-16.