REDHAT-BUG-508738: Medium severity Pidgin Pidgin vulnerability
An out-of-memory denial of service flaw was found in the Pidgin's Open System for CommunicAtion in Realtime (OSCAR) protocol implementation. If a remote ICQ user sent a web message to the local Pidgin user using this protocol, it would lead to excessive memory allocation and denial of service (Pidgin crash).
References: http://developer.pidgin.im/ticket/9483 http://pidgin.im/pipermail/devel/2009-May/008227.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-508738?
REDHAT-BUG-508738 has been classified as a denial of service vulnerability that can lead to system outages.
How do I fix REDHAT-BUG-508738?
To fix REDHAT-BUG-508738, update to the latest version of Pidgin that addresses the vulnerability.
Who is affected by REDHAT-BUG-508738?
REDHAT-BUG-508738 affects users of Pidgin who utilize the OSCAR protocol for communication.
What causes the denial of service in REDHAT-BUG-508738?
The denial of service in REDHAT-BUG-508738 is caused by an out-of-memory condition due to excessive memory allocation when receiving specific web messages.
Can REDHAT-BUG-508738 be exploited remotely?
Yes, REDHAT-BUG-508738 can be exploited remotely if a malicious ICQ user sends a crafted web message to a vulnerable Pidgin client.