This script is Copyright (C) 2010-2011 Tenable Network Security, Inc.
An instant messaging client installed on the remote Windows host is
affected by multiple vulnerabilities.
The version of Pidgin installed on the remote host is earlier than
2.7.6. Such versions are potentially affected by multiple
- An error in the application media code allows a
user-after-free race condition when an error has been
reported by GStreamer. This can result in an
application crash. (12806)
- An error in the Google Relay procedures which attempt to
free resources two times and can lead to denial of
- An error in the MSN handling portion of the application
attempts to use resources after freeing them leading to
application crashes and may allow arbitrary code
See also :
Upgrade to Pidgin 2.7.6 or later.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.1
Public Exploit Available : true