CVE-2011-3594: The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in...

Security readout for executives and security teams

CVE-2011-3594 is a remote crash issue in the SILC protocol plug-in for libpurple 2.10.0 and earlier, used by Pidgin and possibly other products. A malicious or malformed SILC message with invalid UTF-8 can cause denial of service. The sources do not show code execution or confirmed active exploitation. Exposure is most likely on systems running Pidgin or other libpurple-based clients at version 2.10.0 or earlier with the SILC protocol plug-in present or used. The provided CPE data is incomplete, so asset validation is required. Schedule remediation for legacy messaging clients, especially where SILC is used. Business impact is service disruption rather than confirmed compromise, but affected software is old and should not remain unmanaged. Mitigation focus: Apply vendor security updates for Pidgin/libpurple from trusted package channels.; Review Pidgin, Red Hat, and Mandriva advisories for affected package guidance.; Remove or disable SILC support where it is not required..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.