Secunia
Login
|
|
|
|
|
|
|
|
|
Pidgin Multiple Vulnerabilities
Release Date: 2009-05-22 Last Update: 2009-06-09 Views: 4,653
Secunia Advisory SA35194
Where:
From remote
Impact:
DoS, System access,
Solution Status:
Vendor Patch
CVE Reference(s):
Description
Some vulnerabilities and weaknesses have been reported in Pidgin, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a user's system.
1) A truncation error in the processing of MSN SLP messages can be exploited to cause a buffer overflow.
This is related to:
SA30971
2) A boundary error in the XMPP SOCKS5 "bytestream" server when initiating an outgoing file transfer can be exploited to cause a buffer overflow.
Successful exploitation of vulnerabilities #1 and #2 may allow execution of arbitrary code.
3) A boundary error exists in the implementation of the "PurpleCircBuffer" structure. This can be exploited to corrupt memory and cause a crash via specially crafted XMPP or Sametime packets.
4) A boundary error in the "decrypt_out()" function can be exploited to cause a stack-based buffer overflow with 8 bytes and crash the application via a specially crafted QQ packet.
The vulnerabilities are reported in versions prior to 2.5.6.
Solution:
Update to version 2.5.6.
Provided and/or discovered by:
1) Loc VALBON via ZDI
The vendor credits:
2) Veracode
3) Josef Andrysek
4) Ka-Hing Cheung
Original Advisory:
http://www.pidgin.im/news/security/?id=29
http://www.pidgin.im/news/security/?id=30
http://www.pidgin.im/news/security/?id=31
http://www.pidgin.im/news/security/?id=32
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-031/
Deep Links:
Links available to Secunia VIM customers
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
Subject: Pidgin Multiple Vulnerabilities
|
No posts yet |
|
You must be logged in to post a comment. |
