Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2927
HistoryJul 07, 2008 - 11:41 p.m.

CVE-2008-2927

2008-07-0723:41:00
CWE-189
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.107 Low

EPSS

Percentile

95.1%

JSON

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Affected configurations

NVD
Node
pidginpidginRange≤2.4.2
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
Node
adiumadiumRange≤1.2.7
OR
adiumadiumMatch1.0
OR
adiumadiumMatch1.0.1
OR
adiumadiumMatch1.0.2
OR
adiumadiumMatch1.0.3
OR
adiumadiumMatch1.0.4
OR
adiumadiumMatch1.0.5
OR
adiumadiumMatch1.1
OR
adiumadiumMatch1.1.1
OR
adiumadiumMatch1.1.2
OR
adiumadiumMatch1.1.3
OR
adiumadiumMatch1.1.4

References

Related

debiancve 3
cvelist 3
ubuntucve 3
prion 3
cve 3
nessus 33
openvas 68
ubuntu 3
gentoo 2
nvd 2
veracode 2
oraclelinux 2
redhat 2
centos 2
zdi 1
debian 5
checkpoint_advisories 1
securityvulns 5
osv 3
coresecurity 1
fedora 3
debiancve
debiancve
CVE-2008-2927
2008-07-07 23:41:00
CVE-2008-2955
2008-07-01 22:41:00
CVE-2009-1376
2009-05-26 15:30:05
cvelist
cvelist
CVE-2008-2927
2008-07-07 23:00:00
CVE-2008-2955
2008-07-01 22:00:00
CVE-2009-1376
2009-05-26 15:16:00
ubuntucve
ubuntucve
CVE-2008-2927
2008-07-07 00:00:00
CVE-2008-2955
2008-07-01 00:00:00
CVE-2009-1376
2009-05-26 00:00:00
prion
prion
Integer overflow
2008-07-07 23:41:00
Code injection
2008-07-01 22:41:00
Integer overflow
2009-05-26 15:30:00
cve
cve
CVE-2008-2927
2008-07-07 23:41:00
CVE-2008-2955
2008-07-01 22:41:00
CVE-2009-1376
2009-05-26 15:30:05
nessus
nessus
SuSE 10 Security Update : pidgin, gaim and finch (ZYPP Patch Number 5573)
2011-01-27 00:00:00
openSUSE 10 Security Update : finch (finch-5592)
2008-09-14 00:00:00
openSUSE Security Update : finch (finch-188)
2009-07-21 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200901-13 (pidgin)
2009-01-26 00:00:00
Ubuntu: Security Advisory (USN-675-1)
2009-03-23 00:00:00
Ubuntu Update for pidgin vulnerabilities USN-675-1
2009-03-23 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2008-11-24 00:00:00
Gaim vulnerability
2008-11-24 00:00:00
Pidgin vulnerabilities
2010-01-18 00:00:00
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-01-20 00:00:00
Pidgin: Multiple vulnerabilities
2009-05-25 00:00:00
nvd
nvd
CVE-2008-2955
2008-07-01 22:41:00
CVE-2009-1376
2009-05-26 15:30:05
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:25:52
Denial Of Service (DoS)
2020-04-10 00:29:13
oraclelinux
oraclelinux
pidgin security and bug fix update
2008-07-09 00:00:00
pidgin security and bug fix update
2008-12-15 00:00:00
redhat
redhat
(RHSA-2008:0584) Important: pidgin security and bug fix update
2008-07-09 00:00:00
(RHSA-2008:1023) Moderate: pidgin security and bug fix update
2008-12-15 00:00:00
centos
centos
finch, libpurple, pidgin security update
2008-07-09 10:20:19
enscript, finch, libpurple, pidgin security update
2008-12-15 17:14:23
zdi
zdi
Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
2008-08-28 00:00:00
debian
debian
[SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code
2008-07-15 17:46:45
[SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution
2009-08-19 22:29:43
[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities
2009-05-22 20:04:08
checkpoint_advisories
checkpoint_advisories
Pidgin MSN MSNP2P Message Integer Overflow (CVE-2008-2927)
2009-12-21 00:00:00
securityvulns
securityvulns
ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
2008-09-01 00:00:00
libpurple / Pidgin buffer overflow
2009-06-09 00:00:00
CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-19 00:00:00
osv
osv
gaim - execution of arbitrary code
2008-07-15 00:00:00
pidgin - insufficient input sanitization
2009-08-19 00:00:00
pidgin - several vulnerabilities
2009-05-22 00:00:00
coresecurity
coresecurity
Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-18 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: pidgin-2.5.6-1.fc9
2009-06-02 14:26:30
[SECURITY] Fedora 11 Update: pidgin-2.5.6-1.fc11
2009-06-02 14:28:31
[SECURITY] Fedora 10 Update: pidgin-2.5.6-1.fc10
2009-06-02 14:33:34

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.107 Low

EPSS

Percentile

95.1%

JSON
Related for NVD:CVE-2008-2927
debiancve3cvelist3ubuntucve3prion3cve3nessus33openvas68ubuntu3gentoo2nvd2veracode2oraclelinux2redhat2centos2zdi1debian5checkpoint_advisories1securityvulns5osv3coresecurity1fedora3