Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-2694HistoryAug 21, 2009 - 11:02 a.m.
CVE-2009-2694
2009-08-2111:02:00
Debian Security Bug Tracker
security-tracker.debian.org
24
0.125 Low
EPSS
Percentile
95.4%
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pidgin | < 2.5.9-1 | pidgin_2.5.9-1_all.deb |
| Debian | 11 | all | pidgin | < 2.5.9-1 | pidgin_2.5.9-1_all.deb |
| Debian | 10 | all | pidgin | < 2.5.9-1 | pidgin_2.5.9-1_all.deb |
| Debian | 999 | all | pidgin | < 2.5.9-1 | pidgin_2.5.9-1_all.deb |
| Debian | 13 | all | pidgin | < 2.5.9-1 | pidgin_2.5.9-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2009-2694
2009-08-21 00:00:00
CVE-2009-1376
2009-05-26 00:00:00
prion
prion
Memory corruption
2009-08-21 11:02:00
Integer overflow
2009-05-26 15:30:00
cvelist
cvelist
CVE-2009-2694
2009-08-20 22:00:00
CVE-2009-1376
2009-05-26 15:16:00
openvas
openvas
FreeBSD Ports: pidgin, libpurple, finch
2009-09-02 00:00:00
FreeBSD Ports: pidgin, libpurple, finch
2009-09-02 00:00:00
Debian Security Advisory DSA 1870-1 (pidgin)
2009-09-02 00:00:00
cve
cve
CVE-2009-2694
2009-08-21 11:02:00
CVE-2009-1376
2009-05-26 15:30:00
securityvulns
securityvulns
CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-19 00:00:00
ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
2009-06-09 00:00:00
libpurple / Pidgin buffer overflow
2009-06-09 00:00:00
nessus
nessus
Debian DSA-1870-1 : pidgin - insufficient input validation
2010-02-24 00:00:00
CentOS 3 / 5 : pidgin (CESA-2009:1218)
2009-08-20 00:00:00
RHEL 3 / 4 / 5 : pidgin (RHSA-2009:1218)
2009-08-20 00:00:00
debian
debian
[SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution
2009-08-19 22:33:52
[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities
2009-05-22 20:04:22
[Backports-security-announce] Security Update for pidgin
2009-07-29 21:34:44
coresecurity
coresecurity
Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-18 00:00:00
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-10-22 00:00:00
Pidgin: Multiple vulnerabilities
2009-05-25 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:33:22
Arbitrary Code Execution
2020-04-10 00:40:57
zdi
zdi
fedora
fedora
[SECURITY] Fedora 11 Update: gupnp-igd-0.1.3-3.fc11
2009-08-20 21:02:03
[SECURITY] Fedora 11 Update: libnice-0.0.9-1.fc11
2009-08-20 21:02:03
[SECURITY] Fedora 10 Update: pidgin-2.6.1-1.fc10
2009-08-22 00:55:51
redhat
redhat
(RHSA-2009:1218) Critical: pidgin security update
2009-08-18 00:00:00
(RHSA-2009:1059) Important: pidgin security update
2009-05-22 00:00:00
(RHSA-2009:1060) Important: pidgin security update
2009-05-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.6.1-alt1
2009-08-19 00:00:00
seebug
seebug
Pidgin MSN <= 2.5.8 - Remote Code Execution Exploit
2014-07-01 00:00:00
Pidgin Libpurple库msn_slplink_process_msg()函数内存破坏漏洞
2009-08-21 00:00:00
Pidgin MSN <= 2.5.8 Remote Code Execution Exploit
2009-09-11 00:00:00
centos
centos
finch, libpurple, pidgin security update
2009-08-18 19:24:05
pidgin security update
2009-05-22 14:04:17
finch, libpurple, pidgin security update
2009-05-22 21:24:35
oraclelinux
oraclelinux
pidgin security update
2009-08-18 00:00:00
pidgin security update
2009-05-22 00:00:00
pidgin security update
2009-05-26 00:00:00
ubuntu
ubuntu
Pidgin vulnerability
2009-08-20 00:00:00
Gaim vulnerabilities
2009-06-03 00:00:00
Pidgin vulnerabilities
2009-06-03 00:00:00
exploitpack
exploitpack
Pidgin MSN 2.5.8 - Remote Code Execution
2009-09-09 00:00:00
freebsd
freebsd
pidgin -- MSN overflow parsing SLP messages
2009-08-18 00:00:00
pidgin -- multiple vulnerabilities
2009-06-03 00:00:00
packetstorm
packetstorm
Pidgin MSN 2.5.8 Code Execution
2009-09-10 00:00:00
cert
cert
Libpurple buffer overflow vulnerability
2009-08-21 00:00:00
osv
osv
pidgin - insufficient input sanitization
2009-08-19 00:00:00
pidgin - several vulnerabilities
2009-05-22 00:00:00
debiancve
debiancve
CVE-2009-1376
2009-05-26 15:30:00
exploitdb
exploitdb
Pidgin MSN 2.5.8 - Remote Code Execution
2009-09-09 00:00:00