REDHAT-BUG-554335: Medium severity pidgin vulnerability

Published Jan 11, 2010

Updated

slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different issue than CVE-2010-0013.

Reference: URL:http://www.openwall.com/lists/oss-security/2010/01/07/2 Reference: MISC:http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html

Affected Software

2 affected components

Pidgin Pidgin

Adium Adium

Event History

Jan 11, 2010

Data Sourced

via Red Hat·01:08 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-554335?

REDHAT-BUG-554335 is classified as a Denial of Service vulnerability that can lead to memory corruption.

How do I fix REDHAT-BUG-554335?

To fix REDHAT-BUG-554335, it is recommended to update the affected applications Pidgin and Adium to their latest versions.

Which versions are affected by REDHAT-BUG-554335?

REDHAT-BUG-554335 affects Pidgin 2.6.4 and Adium 1.3.8.

Can REDHAT-BUG-554335 be exploited remotely?

Yes, REDHAT-BUG-554335 can be exploited by remote attackers.

What kind of impact can REDHAT-BUG-554335 have?

Besides causing a Denial of Service, REDHAT-BUG-554335 may have unspecified other impacts.