Published: 21/08/2009 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) prior to 2.5.9 and Adium 1.3.5 and previous versions, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pidgin pidgin 2.0.1
pidgin pidgin 2.0.2
pidgin pidgin 2.3.1
pidgin pidgin 2.4.0
pidgin pidgin 2.5.3
pidgin pidgin 2.5.4
adium adium 1.3.3
adium adium 1.3.4
pidgin pidgin 2.0.0
pidgin pidgin 2.2.2
pidgin pidgin 2.3.0
pidgin pidgin 2.5.1
pidgin pidgin 2.5.2
adium adium 1.3.1
adium adium 1.3.2
pidgin pidgin 2.1.0
pidgin pidgin 2.1.1
pidgin pidgin 2.4.1
pidgin pidgin 2.4.2
pidgin pidgin 2.5.6
pidgin pidgin 2.5.7
pidgin pidgin
adium adium
pidgin pidgin 2.2.0
pidgin pidgin 2.2.1
pidgin pidgin 2.4.3
pidgin pidgin 2.5.0
adium adium 1.2.7
adium adium 1.3

Debian Bug report logs - #542486 pidgin: CVE-2009-2694 Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability Package: pidgin; Maintainer for pidgin is Ari Pollak <ari@debianorg>; Source for pidgin is src:pidgin (PTS, buildd, popcon) Reported by: Josue Abarca <jmaslibre@debianorggt> Date: Wed, 19 Aug 20 ...

Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges ...

Federico Muttis discovered that libpurple, the shared library that adds support for various instant messaging networks to the pidgin IM client, is vulnerable to a heap-based buffer overflow This issue exists because of an incomplete fix for CVE-2008-2927 and CVE-2009-1376 An attacker can exploit this by sending two consecutive SLP packets to a vi ...

/* * Pidgin MSN <= 258 Remote Code Execution * * Pierre Nogues - pierz@hotmailit * wwwindahaxcom/ * * * Description: * Pidgin is a multi-protocol Instant Messenger * * This is an exploit for the vulnerability[1] discovered in Pidgin by core-security[2] * The library "libmsn" used by pidgin doesn't handle specia ...

Pidgin MSN versions 258 and below remote code execution exploit ...

CWE-399 https://rhn.redhat.com/errata/RHSA-2009-1218.html http://secunia.com/advisories/36384 https://bugzilla.redhat.com/show_bug.cgi?id=514957 http://www.pidgin.im/news/security/?id=34 http://www.coresecurity.com/content/libpurple-arbitrary-write http://secunia.com/advisories/36401 http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e http://developer.pidgin.im/wiki/ChangeLog http://www.vupen.com/english/advisories/2009/2303 http://secunia.com/advisories/36392 http://www.debian.org/security/2009/dsa-1870 http://secunia.com/advisories/36402 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1 http://www.vupen.com/english/advisories/2009/2663 http://secunia.com/advisories/36708 http://secunia.com/advisories/37071 http://www.exploit-db.com/exploits/9615 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542486 https://usn.ubuntu.com/820-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/9615/https://www.kb.cert.org/vuls/id/582244

CVE-2009-2694

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect