CVE-2008-2956

Published: 1 July 2008

** DISPUTED ** Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via malformed XML documents. NOTE: this issue has been disputed by the upstream vendor, who states: "I was never able to identify a scenario under which a problem occurred and the original reporter wasn't able to supply any sort of reproduction details."

Notes

as of 2008-11-20, has not been fixed by upstream AFAICT
as of 2009-07-03, has not been fixed by upstream AFAICT
upstream is ignoring this. let's ignore it too.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2008-2956
• NVD
• Launchpad
• Debian