Integer overflow

🗓️ 07 Jul 2008 23:41:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 19 Views

Integer overflow in MSN protocol handler allowing remote code execution via crafted SLP messag

Reporter	Title	Published	Views	Family All 157
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 3 / 4 / 5 : pidgin (CESA-2008:0584)	10 Jul 200800:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : pidgin (CESA-2008:1023)	23 Dec 200800:00	–	nessus
Tenable Nessus	CentOS 3 : pidgin (CESA-2009:1059)	23 May 200900:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : pidgin (CESA-2009:1060)	6 Jan 201000:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2008/07/04/1
openwall	www.openwall.com/lists/oss-security/2008/07/03/6
developer	www.developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c
developer	www.developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
mandriva	www.mandriva.com/security/advisories
secunia	www.secunia.com/advisories/31387
debian	www.debian.org/security/2008/dsa-1610
secunia	www.secunia.com/advisories/31016
securityfocus	www.securityfocus.com/archive/1/493682

13 Feb 2023 02:19Current

7.5High risk

Vulners AI Score7.5

EPSS0.07258

integer overflow msn protocol remote attackers arbitrary code crafted slp message