CVE-2009-1373: Buffer Overflow
A buffer overflow flaw was found in the way Pidgin initiates file transfers. If a Pidgin client initiates a file transfer, and the remote target sends a malformed response, it triggers a buffer overflow.
Other sources
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1373?
CVE-2009-1373 is classified as a high severity vulnerability due to the potential for remote code execution caused by a buffer overflow.
How do I fix CVE-2009-1373?
To fix CVE-2009-1373, you should upgrade Pidgin to version 2.5.6 or later, which includes the necessary security patches.
Which versions of Pidgin are affected by CVE-2009-1373?
CVE-2009-1373 affects Pidgin versions prior to 2.5.6, specifically including versions 2.0.0 through 2.5.5.
What kind of attack does CVE-2009-1373 facilitate?
CVE-2009-1373 facilitates remote code execution, allowing an attacker to execute arbitrary code on the vulnerable system during file transfers.
Is CVE-2009-1373 specific to any operating system?
CVE-2009-1373 is not specific to an operating system but affects all installations of the vulnerable versions of Pidgin regardless of the platform.