CVE-2009-1889

CVE-2009-1889 affects Pidgin's OSCAR protocol implementation. A remote ICQ web message can be misinterpreted (ICQWebMessage vs ICQSMS), triggering large memory allocation and causing a denial of service (Pidgin crash). Documents consistently describe this DoS via crafted ICQ web messages and note...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:147)

Security vulnerabilities has been identified and fixed in pidgin : Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these detail...

CVE-2009-1889: Undefined Security Weakness

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Mandrake Security Advisory MDVSA-2009:140 (gaim)

The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. OpenVAS Vulnerability Test $Id: mdksa2009140.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:140 gaim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:140 (gaim)

The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. VID b1ca65e6-5aaf-11de-bc9b-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID b1ca65e6-5aaf-11de-bc9b-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : pidgin -- multiple vulnerabilities (b1ca65e6-5aaf-11de-bc9b-0030843d3802)

Secunia reports : Some vulnerabilities and weaknesses have been reported in Pidgin, which can be exploited by malicious people to cause a DoS or to potentially compromise a user's system. A truncation error in the processing of MSN SLP messages can be exploited to cause a buffer overflow. A...

ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-09-031: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-031 June 8, 2009 -- CVE ID: CVE-2009-1376 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details: This...

libpurple / Pidgin buffer overflow

Buffer overflow on MSN SLP messages parsing...

Fedora Core 10 FEDORA-2009-5597 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5597. OpenVAS Vulnerability Test $Id: fcore20095597.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5597 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-5552 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. OpenVAS Vulnerability Test $Id: fcore20095552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5552 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-5583 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5583. OpenVAS Vulnerability Test $Id: fcore20095583.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5583 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Gentoo Security Advisory GLSA 200905-07 (pidgin)

The remote host is missing updates announced in advisory GLSA 200905-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Ubuntu USN-781-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory USN-781-1. OpenVAS Vulnerability Test $Id: ubuntu7811.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7811.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-781-1 pidgin Authors: Thomas Rein...

Ubuntu: Security Advisory (USN-781-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200905-07 (pidgin)

The remote host is missing updates announced in advisory GLSA 200905-07. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Core 9 FEDORA-2009-5552 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...