Submitted by MarcDeslauriers on Mon, 2009-07-06 18:33
Referenced CVEs:
CVE-2009-1889
Description:
===========================================================
Ubuntu Security Notice USN-796-1 July 06, 2009
pidgin vulnerability
CVE-2009-1889
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 8.04 LTS:
pidgin 1:2.4.1-1ubuntu2.5
Ubuntu 8.10:
pidgin 1:2.5.2-0ubuntu1.3
Ubuntu 9.04:
pidgin 1:2.5.5-1ubuntu8.3
After a standard system upgrade you need to restart Pidgin to effect
the necessary changes.
Details follow:
Yuriy Kaminskiy discovered that Pidgin did not properly handle certain
messages in the ICQ protocol handler. A remote attacker could send a
specially crafted message and cause Pidgin to crash.


