Lucene search

K
freebsdFreeBSDB1CA65E6-5AAF-11DE-BC9B-0030843D3802
HistoryJun 03, 2009 - 12:00 a.m.

pidgin -- multiple vulnerabilities

2009-06-0300:00:00
vuxml.freebsd.org
18

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.203 Low

EPSS

Percentile

96.3%

Secunia reports:

Some vulnerabilities and weaknesses have been reported in Pidgin,
which can be exploited by malicious people to cause a DoS or to
potentially compromise a user’s system.
A truncation error in the processing of MSN SLP messages can be
exploited to cause a buffer overflow.
A boundary error in the XMPP SOCKS5 β€œbytestream” server when
initiating an outgoing file transfer can be exploited to cause a
buffer overflow.
A boundary error exists in the implementation of the
β€œPurpleCircBuffer” structure. This can be exploited to corrupt memory
and cause a crash via specially crafted XMPP or Sametime
packets.
A boundary error in the β€œdecrypt_out()” function can be exploited
to cause a stack-based buffer overflow with 8 bytes and crash the
application via a specially crafted QQ packet.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpidgin<Β 2.5.6UNKNOWN
FreeBSDanynoarchlibpurple<Β 2.5.6UNKNOWN
FreeBSDanynoarchfinch<Β 2.5.6UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.203 Low

EPSS

Percentile

96.3%