CVE-2009-2694: Undefined Security Weakness

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

Slackware 12.0 / 12.1 / 12.2 / current : pidgin (SSA:2009-231-02)

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-231-02. The text itself is...

Pidgin < 2.5.9 'msn_slplink_process_msg()' Memory Corruption

The version of Pidgin installed on the remote host is earlier than 2.5.9. Such versions are reportedly affected by a vulnerability in 'msnslplinkprocessmsg'. Maliciously crafted MSN SLP messages can result in memory corruption. A remote attacker could use this to crash the client, or execute...

RHEL 3 / 4 / 5 : pidgin (RHSA-2009:1218)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

CentOS 3 / 5 : pidgin (CESA-2009:1218)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

[SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1870-1 [email protected] http://www.debian.org/security/ Nico Golde August 19th, 2009 http://www.debian.org/security/faq -...

pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2694 Here are the details from the Slackware 12.2 ChangeLog...

Libpurple / Pidgin memory corruption

Memory corruption on malformed MSN protocol message...

Security fix for the ALT Linux 5 package pidgin-mini version 2.6.1-alt1

Aug. 19, 2009 Valery Inozemtsev 2.6.1-alt1 - 2.6.1 - fixed CVE-2009-2694...

DSA-1870-1 pidgin - insufficient input sanitization

Bulletin has no description...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1218 Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

Critical: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability

Advisory ID Internal CORE-2009-0727 1. Advisory Information Title: Libpurple msnslplinkprocessmsg Arbitrary Write Vulnerability Advisory ID: CORE-2009-0727 Date published: 2009-08-18 Date of last update: 2009-08-18 Vendors contacted: Pidgin team Release mode: Coordinated release 2. Vulnerability...

pidgin security update

2.5.9-1 - CVE-2009-2694...

pidgin -- MSN overflow parsing SLP messages

Secunia reports: A vulnerability has been reported in Pidgin, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error in the "msnslplinkprocessmsg" function when processing MSN SLP messages and can be exploited to corrupt...

Mandrake Security Advisory MDVSA-2009:173 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:173. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:173 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:173. OpenVAS Vulnerability Test $Id: mdksa2009173.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:173 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Multiple Products NSS Library Buffer Overflow Vulnerability

Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2009-2404: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL servers to cause a denial of service application crash or possibly...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problems: CVE-2009-1373 Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP...