CVE-2009-1376: Buffer Overflow
Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.
Other sources
The integer overflow fix for CVE-2008-2927 was incomplete on 32 bit platforms. If a Pidgin user can receive a specially crafted MSN message, it may be possible to execute arbitrary code with the permissions of the user running Pidgin.
This flaw is only exploitable by individuals who can message a user, which is controlled by the Pidgin privacy setting. The default setting is to only allow messages from users in the buddy list.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-1376?
CVE-2009-1376 has a medium severity rating because it allows remote code execution through integer overflows.
How do I fix CVE-2009-1376?
To fix CVE-2009-1376, update Pidgin to version 2.5.6 or later.
What versions of Pidgin are affected by CVE-2009-1376?
Pidgin versions prior to 2.5.6, including those up to 2.5.5, are affected by CVE-2009-1376.
Is CVE-2009-1376 present in 64-bit platforms?
CVE-2009-1376 specifically affects 32-bit versions of Pidgin software.
Who are the potential attackers in CVE-2009-1376?
Remote attackers can exploit CVE-2009-1376 to execute arbitrary code on vulnerable systems.