CVE-2012-1178: The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10....

Security readout for executives and security teams

CVE-2012-1178 is a denial-of-service flaw in Pidgin/libpurple's MSN protocol handling. A remote server could send an offline instant message without UTF-8 encoding and crash the application. The known impact is availability loss for the client, not data theft or code execution. Exposure is most likely on systems still running Pidgin/libpurple before 2.10.2 with the MSN protocol plugin present or enabled. Managed Linux distributions may have backported fixes, so package advisory status matters more than upstream version alone. Treat this as a low-priority legacy client availability issue unless old Pidgin/libpurple deployments remain in use. It should be remediated through normal patch hygiene, not emergency response, based on the supplied evidence. Mitigation focus: Upgrade Pidgin/libpurple to 2.10.2 or a vendor-patched package.; Apply relevant distribution advisories, including Red Hat or Mandriva fixes where applicable.; Disable or remove the MSN protocol plugin where it is unnecessary..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.