CVE-2009-3083
Published: 8 September 2009
The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
Priority
Status
Package | Release | Status |
---|---|---|
pidgin Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
hardy |
Released
(1:2.4.1-1ubuntu2.8)
|
|
intrepid |
Released
(1:2.5.2-0ubuntu1.6)
|
|
jaunty |
Released
(1:2.5.5-1ubuntu8.5)
|
|
karmic |
Not vulnerable
(1:2.6.2-1ubuntu2)
|
|
upstream |
Released
(2.6.2)
|
|
Patches: upstream: http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd |