cve-2011-4602-00

Summary XMPP remote crash
Date 2011-12-10
CVE Number CVE-2011-4602
Discovered By Thijs Alkemade
Fixed In Release 2.10.1

Description

When receiving various stanzas related to voice and video chat, the XMPP protocol plugin failed to ensure that the incoming message contained all required fields, and would crash if certain fields were missing.

Mitigation

Check for missing fields and handle them appropriately.

Looking to reach us via XMPP? Check out the new PidginChat service!