CVE-2009-1375: Buffer Overflow
A flaw was found in the way Pidgin's PurpleCircBuffer object is expanded. If the buffer is full when more data arrives, it results in corruption of the data stored in the buffer. This corrupt data could possibly result in confusing or misleading data being presented to the user, or possibly crash Pidgin.
Other sources
The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1375?
CVE-2009-1375 is classified as a medium severity vulnerability.
How do I fix CVE-2009-1375?
To fix CVE-2009-1375, upgrade Pidgin to version 2.5.5 or later.
Which versions of Pidgin are affected by CVE-2009-1375?
CVE-2009-1375 affects Pidgin versions 2.0.0 through 2.5.4.
What type of vulnerability is CVE-2009-1375?
CVE-2009-1375 is a buffer overflow vulnerability affecting the PurpleCircBuffer object in Pidgin.
What are the potential impacts of CVE-2009-1375?
The potential impacts of CVE-2009-1375 include data corruption and application crashes in Pidgin.