REDHAT-BUG-500493: Integer Overflow
The integer overflow fix for CVE-2008-2927 was incomplete on 32 bit platforms. If a Pidgin user can receive a specially crafted MSN message, it may be possible to execute arbitrary code with the permissions of the user running Pidgin.
This flaw is only exploitable by individuals who can message a user, which is controlled by the Pidgin privacy setting. The default setting is to only allow messages from users in the buddy list.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-500493?
The severity of REDHAT-BUG-500493 is likely high due to the potential for arbitrary code execution.
How do I fix REDHAT-BUG-500493?
To fix REDHAT-BUG-500493, users should update Pidgin to the latest version where the integer overflow vulnerability has been addressed.
What are the potential risks associated with REDHAT-BUG-500493?
The potential risks associated with REDHAT-BUG-500493 include executing arbitrary code with the permissions of the user running Pidgin.
Which version of Pidgin is affected by REDHAT-BUG-500493?
All versions of Pidgin on 32-bit platforms prior to the patch addressing this vulnerability are affected by REDHAT-BUG-500493.
Can REDHAT-BUG-500493 affect my system security?
Yes, REDHAT-BUG-500493 can significantly impact system security by allowing unauthorized code execution through specially crafted messages.