Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-3085
HistorySep 08, 2009 - 12:00 a.m.

CVE-2009-3085

2009-09-0800:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.028 Low

EPSS

Percentile

90.6%

JSON

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not
properly handle an error IQ stanza during an attempted fetch of a custom
smiley, which allows remote attackers to cause a denial of service
(application crash) via XHTML-IM content with cid: images.

Notes

Author Note
mdeslaur code in hardy is different
OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchpidgin< 1:2.5.2-0ubuntu1.6UNKNOWN
ubuntu9.04noarchpidgin< 1:2.5.5-1ubuntu8.5UNKNOWN

Related

veracode 1
cve 1
prion 1
debiancve 1
nessus 13
openvas 29
securityvulns 2
redhat 1
centos 1
fedora 5
oraclelinux 1
ubuntu 1
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:06
cve
cve
CVE-2009-3085
2009-09-08 18:30:00
prion
prion
Out-of-bounds
2009-09-08 18:30:00
debiancve
debiancve
CVE-2009-3085
2009-09-08 18:30:00
nessus
nessus
RHEL 4 / 5 : pidgin (RHSA-2009:1453)
2009-09-22 00:00:00
Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
CentOS 4 / 5 : pidgin (CESA-2009:1453)
2010-01-06 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1453
2009-09-28 00:00:00
Pidgin Multiple Denial Of Service Vulnerabilities (Windows)
2009-09-15 00:00:00
CentOS Update for finch CESA-2009:1453 centos5 i386
2011-08-09 00:00:00
securityvulns
securityvulns
libpurple / Pidgin multiple security vulnerabilities
2009-09-14 00:00:00
[ MDVSA-2009:230 ] pidgin
2009-09-14 00:00:00
redhat
redhat
(RHSA-2009:1453) Moderate: pidgin security update
2009-09-21 00:00:00
centos
centos
finch, libpurple, pidgin security update
2009-09-22 13:47:28
fedora
fedora
[SECURITY] Fedora 11 Update: pidgin-2.6.3-2.fc11
2009-10-21 00:50:54
[SECURITY] Fedora 10 Update: pidgin-2.6.3-2.fc10
2009-10-21 00:56:06
[SECURITY] Fedora 11 Update: pidgin-2.6.5-1.fc11
2010-01-12 20:51:38
oraclelinux
oraclelinux
pidgin security update
2009-09-21 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2010-01-18 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.028 Low

EPSS

Percentile

90.6%

JSON
Related for UB:CVE-2009-3085
veracode1cve1prion1debiancve1nessus13openvas29securityvulns2redhat1centos1fedora5oraclelinux1ubuntu1