CVE-2009-3083

CVE-2009-3083 describes a denial-of-service vulnerability affecting Pidgin versions prior to 2.6.2, specifically within the MSN protocol plugin's libpurple component. A remote attacker can exploit this by sending a malformed SLP invite message lacking required fields, leading to a NULL pointer dereference and application crash. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial availability impact. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.