Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1376
HistoryMay 26, 2009 - 3:30 p.m.

CVE-2009-1376

2009-05-2615:30:05
CWE-189
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.261 Low

EPSS

Percentile

96.8%

JSON

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

Affected configurations

NVD
Node
pidginpidginRange≀2.5.5
OR
pidginpidginMatch2.4.032_bit
OR
pidginpidginMatch2.4.132_bit
OR
pidginpidginMatch2.4.232_bit
OR
pidginpidginMatch2.4.332_bit
OR
pidginpidginMatch2.5.032_bit
OR
pidginpidginMatch2.5.232_bit
OR
pidginpidginMatch2.5.332_bit
OR
pidginpidginMatch2.5.432_bit

References

Related

cve 3
securityvulns 8
cvelist 3
ubuntucve 3
debiancve 3
osv 3
prion 3
nessus 46
openvas 80
debian 5
coresecurity 1
zdi 2
veracode 2
oraclelinux 3
redhat 3
centos 3
gentoo 3
checkpoint_advisories 1
ubuntu 5
fedora 3
nvd 2
seebug 1
slackware 1
freebsd 1
cve
cve
CVE-2009-1376
2009-05-26 15:30:05
CVE-2008-2927
2008-07-07 23:41:00
CVE-2009-2694
2009-08-21 11:02:41
securityvulns
securityvulns
libpurple / Pidgin buffer overflow
2009-06-09 00:00:00
CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-19 00:00:00
[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities
2009-05-25 00:00:00
cvelist
cvelist
CVE-2009-1376
2009-05-26 15:16:00
CVE-2009-2694
2009-08-20 22:00:00
CVE-2008-2927
2008-07-07 23:00:00
ubuntucve
ubuntucve
CVE-2009-1376
2009-05-26 00:00:00
CVE-2008-2927
2008-07-07 00:00:00
CVE-2009-2694
2009-08-21 00:00:00
debiancve
debiancve
CVE-2009-1376
2009-05-26 15:30:05
CVE-2009-2694
2009-08-21 11:02:41
CVE-2008-2927
2008-07-07 23:41:00
osv
osv
pidgin - insufficient input sanitization
2009-08-19 00:00:00
pidgin - several vulnerabilities
2009-05-22 00:00:00
gaim - execution of arbitrary code
2008-07-15 00:00:00
prion
prion
Integer overflow
2009-05-26 15:30:00
Integer overflow
2008-07-07 23:41:00
Memory corruption
2009-08-21 11:02:00
nessus
nessus
RHEL 3 : pidgin (RHSA-2009:1059)
2009-05-23 00:00:00
Debian DSA-1870-1 : pidgin - insufficient input validation
2010-02-24 00:00:00
CentOS 3 : pidgin (CESA-2009:1059)
2009-05-23 00:00:00
openvas
openvas
CentOS Security Advisory CESA-2009:1059 (pidgin)
2009-05-25 00:00:00
RedHat Security Advisory RHSA-2009:1059
2009-05-25 00:00:00
CentOS Update for pidgin CESA-2009:1059 centos3 i386
2011-08-09 00:00:00
debian
debian
[SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution
2009-08-19 22:29:43
[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities
2009-05-22 20:04:08
[SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code
2008-07-15 17:46:45
coresecurity
coresecurity
Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
2009-08-18 00:00:00
zdi
zdi
Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
2009-06-08 00:00:00
Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
2008-08-28 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:33:22
Arbitrary Code Execution
2020-04-10 00:25:52
oraclelinux
oraclelinux
pidgin security and bug fix update
2008-07-09 00:00:00
pidgin security update
2009-05-22 00:00:00
pidgin security update
2009-05-26 00:00:00
redhat
redhat
(RHSA-2008:0584) Important: pidgin security and bug fix update
2008-07-09 00:00:00
(RHSA-2009:1059) Important: pidgin security update
2009-05-22 00:00:00
(RHSA-2009:1060) Important: pidgin security update
2009-05-22 00:00:00
centos
centos
finch, libpurple, pidgin security update
2008-07-09 10:20:19
pidgin security update
2009-05-22 14:04:17
finch, libpurple, pidgin security update
2009-05-22 21:24:35
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-05-25 00:00:00
Pidgin: Multiple vulnerabilities
2009-01-20 00:00:00
Pidgin: Multiple vulnerabilities
2009-10-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Pidgin MSN MSNP2P Message Integer Overflow (CVE-2008-2927)
2009-12-21 00:00:00
ubuntu
ubuntu
Gaim vulnerability
2008-11-24 00:00:00
Gaim vulnerabilities
2009-06-03 00:00:00
Pidgin vulnerabilities
2008-11-24 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: pidgin-2.5.6-1.fc9
2009-06-02 14:26:30
[SECURITY] Fedora 11 Update: pidgin-2.5.6-1.fc11
2009-06-02 14:28:31
[SECURITY] Fedora 10 Update: pidgin-2.5.6-1.fc10
2009-06-02 14:33:34
nvd
nvd
CVE-2009-2694
2009-08-21 11:02:41
CVE-2008-2927
2008-07-07 23:41:00
seebug
seebug
Pidgin倚δΈͺηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-05-25 00:00:00
slackware
slackware
pidgin
2009-05-26 19:19:48
freebsd
freebsd
pidgin -- multiple vulnerabilities
2009-06-03 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.261 Low

EPSS

Percentile

96.8%

JSON
Related for NVD:CVE-2009-1376
cve3securityvulns8cvelist3ubuntucve3debiancve3osv3prion3nessus46openvas80debian5coresecurity1zdi2veracode2oraclelinux3redhat3centos3gentoo3checkpoint_advisories1ubuntu5fedora3nvd2seebug1slackware1freebsd1