Published: 26/05/2009 Updated: 29/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) prior to 2.5.6 allows remote malicious users to cause a denial of service (application crash) via a QQ packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pidgin pidgin 2.0.0
pidgin pidgin 2.4.0
pidgin pidgin 2.2.1
pidgin pidgin 2.2.2
pidgin pidgin 2.4.1
pidgin pidgin 2.2.0
pidgin pidgin 2.0.2
pidgin pidgin
pidgin pidgin 2.4.3
pidgin pidgin 2.1.1
pidgin pidgin 2.4.2
pidgin pidgin 2.3.1
pidgin pidgin 2.5.4
pidgin pidgin 2.5.3
pidgin pidgin 2.0.1
pidgin pidgin 2.1.0
pidgin pidgin 2.3.0
pidgin pidgin 2.5.2
pidgin pidgin 2.5.1
pidgin pidgin 2.5.0

Synopsis Important: pidgin security update Type/Severity Security Advisory: Important Topic Updated pidgin packages that fix several security issues are now availablefor Red Hat Enterprise Linux 4 and 5This update has been rated as having important security impact by the RedHat Security Response Team ...

It was discovered that Pidgin did not properly handle certain malformed messages when sending a file using the XMPP protocol handler If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Pidgin to crash, or possibly execute arbitrary code with user privileges (CVE-2009-1373) ...

CWE-119 http://www.redhat.com/support/errata/RHSA-2009-1060.html http://www.pidgin.im/news/security/?id=30 http://www.securityfocus.com/bid/35067 https://bugzilla.redhat.com/show_bug.cgi?id=500490 http://secunia.com/advisories/35194 http://secunia.com/advisories/35202 http://secunia.com/advisories/35188 http://www.vupen.com/english/advisories/2009/1396 http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html http://www.ubuntu.com/usn/USN-781-1 http://secunia.com/advisories/35294 http://secunia.com/advisories/35329 http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 https://exchange.xforce.ibmcloud.com/vulnerabilities/50684 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654 https://access.redhat.com/errata/RHSA-2009:1060 https://usn.ubuntu.com/781-1/https://nvd.nist.gov

CVE-2009-1374

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect