CVE-2009-2703: Buffer Overflow
Published Sep 8, 2009
·Updated
libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
Affected Software
37 affected components
Pidgin libpurple
Pidgin Pidgin<=2.6.1
Pidgin Pidgin=2.0.0
Pidgin Pidgin=2.0.1
Pidgin Pidgin=2.0.2
Pidgin Pidgin=2.0.2
Pidgin Pidgin=2.1.0
Pidgin Pidgin=2.1.1
Pidgin Pidgin=2.2.0
Pidgin Pidgin=2.2.1
Pidgin Pidgin=2.2.2
Pidgin Pidgin=2.3.0
Pidgin Pidgin=2.3.1
Pidgin Pidgin=2.4.0
Pidgin Pidgin=2.4.0-32_bit
Pidgin Pidgin=2.4.1
Pidgin Pidgin=2.4.1-32_bit
Pidgin Pidgin=2.4.2
Pidgin Pidgin=2.4.2-32_bit
Pidgin Pidgin=2.4.3
Pidgin Pidgin=2.4.3-32_bit
Pidgin Pidgin=2.5.0
Pidgin Pidgin=2.5.0-32_bit
Pidgin Pidgin=2.5.1
Pidgin Pidgin=2.5.2
Pidgin Pidgin=2.5.2-32_bit
Pidgin Pidgin=2.5.3
Pidgin Pidgin=2.5.3-32_bit
Pidgin Pidgin=2.5.4
Pidgin Pidgin=2.5.4-32_bit
Pidgin Pidgin=2.5.5
Pidgin Pidgin=2.5.5-32_bit
Pidgin Pidgin=2.5.6
Pidgin Pidgin=2.5.7
Pidgin Pidgin=2.5.8
Pidgin Pidgin=2.5.9
Pidgin Pidgin=2.6.0
Remediation
Patch Available
Event History
Sep 8, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2703?
CVE-2009-2703 has a severity rating that indicates it can lead to a denial of service due to a NULL pointer dereference.
2
How do I fix CVE-2009-2703?
To fix CVE-2009-2703, upgrade to Pidgin version 2.6.2 or later, which resolves this vulnerability.
3
Which versions of Pidgin are affected by CVE-2009-2703?
CVE-2009-2703 affects all Pidgin versions prior to 2.6.2.
4
What type of vulnerability is CVE-2009-2703?
CVE-2009-2703 is a denial of service vulnerability within the IRC protocol plugin of Pidgin.
5
Can CVE-2009-2703 be exploited remotely?
Yes, CVE-2009-2703 can be exploited by remote IRC servers sending a specially crafted TOPIC message.