← Database

CVE-2008-3532

MEDIUM CVSS: 6.8 Published: 2008-08-08 Modified: 2026-06-16

Description

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.

Affected Platforms

Pidgin Pidgin

Weakness Type

CWE-310

References