Lucene search

K
freebsdFreeBSD59E7AF2D-8DB7-11DE-883B-001E3300A30D
HistoryAug 18, 2009 - 12:00 a.m.

pidgin -- MSN overflow parsing SLP messages

2009-08-1800:00:00
vuxml.freebsd.org
11

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.125 Low

EPSS

Percentile

95.4%

Secunia reports:

A vulnerability has been reported in Pidgin, which can be
exploited by malicious people to potentially compromise a user’s
system.
The vulnerability is caused due to an error in the
β€œmsn_slplink_process_msg()” function when processing MSN SLP
messages and can be exploited to corrupt memory.
Successful exploitation may allow execution of arbitrary
code.
The vulnerability is reported in versions 2.5.8 and prior.
Other versions may also be affected.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpidgin<Β 2.5.9UNKNOWN
FreeBSDanynoarchlibpurple<Β 2.5.9UNKNOWN
FreeBSDanynoarchfinch<Β 2.5.9UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.125 Low

EPSS

Percentile

95.4%