Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-1376 — Improper Handling of Syntactically Invalid Structure in Pidgin

CWE-189CWE-228 — Improper Handling of Syntactically Invalid StructureCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer17 documents8 sources
Severity
10.0CRITICALNVD
NVD9.3OSV9.3OSV6.8
EPSS
25.9%
top 3.71%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
PidginDebian PidginAdium
Timeline
PublishedMay 26
Latest updateMay 2

Description

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages4 packages

▶debiandebian/pidgin< pidgin 2.5.9-1 (bookworm)+1
▶Debianpidgin/pidgin< 2.5.9-1+7
▶NVDpidgin/pidgin2.5.8+22
▶NVDadium/adium1.3.5+6

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-p33h-j5pj-5f6r: Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink↗2022-05-02
▶
GHSA
GHSA-gg6v-c4q4-582f: The msn_slplink_process_msg function in libpurple/protocols/msn/slplink↗2022-05-02
▶
OSV
CVE-2009-2694: The msn_slplink_process_msg function in libpurple/protocols/msn/slplink↗2009-08-21
▶
OSV
CVE-2009-1376: Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink↗2009-05-26
▶

💥Exploits & PoCs

1
Exploit-DB
Pidgin MSN 2.5.8 - Remote Code Execution↗2009-09-09
▶

📋Vendor Advisories

7
Ubuntu
Pidgin vulnerabilities↗2010-01-18
▶
Red Hat
pidgin: insufficient input validation in msn_slplink_process_msg()↗2009-08-18
▶
Ubuntu
Pidgin vulnerabilities↗2009-06-03
▶
Ubuntu
Gaim vulnerabilities↗2009-06-03
▶
Red Hat
pidgin incomplete fix for CVE-2008-2927↗2009-05-02
▶

💬Community

3
Bugzilla
CVE-2009-2694 pidgin: insufficient input validation in msn_slplink_process_msg()↗2009-07-31
▶
Bugzilla
CVE-2009-1376 CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 Multiple pidgin vulnerabilities↗2009-05-26
▶
Bugzilla
CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927↗2009-05-12
▶