CVE-2013-6481 on Ubuntu 12.04 LTS (precise) - medium.
Description:
libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.