NVD

Id
2821  
Name
CVE-2008-2927  
Description
Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2013-11-02  
Seq
2008-2927  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17770 2821 CVE-2008-2927 http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c  View
17771 2821 CVE-2008-2927 http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c  View
17772 2821 CVE-2008-2927 oval:org.mitre.oval:def:11695  View
17773 2821 CVE-2008-2927 oval:org.mitre.oval:def:17972  View
17774 2821 CVE-2008-2927 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246  View
17775 2821 CVE-2008-2927 DSA-1610  View
17776 2821 CVE-2008-2927 MDVSA-2008:143  View
17777 2821 CVE-2008-2927 MDVSA-2009:127  View
17778 2821 CVE-2008-2927 [oss-security] 20080704 Re: Re: CVE Request (pidgin)  View
17779 2821 CVE-2008-2927 [oss-security] 20080703 Re: Re: CVE Request (pidgin)  View
17780 2821 CVE-2008-2927 http://www.pidgin.im/news/security/?id=25  View
17781 2821 CVE-2008-2927 RHSA-2008:0584  View
17782 2821 CVE-2008-2927 20080625 Pidgin 2.4.1 Vulnerability  View
17783 2821 CVE-2008-2927 20080806 rPSA-2008-0246-1 gaim  View
17784 2821 CVE-2008-2927 20080828 ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability  View
17785 2821 CVE-2008-2927 29956  View
17786 2821 CVE-2008-2927 1020451  View
17787 2821 CVE-2008-2927 USN-675-1  View
17788 2821 CVE-2008-2927 USN-675-2  View
17789 2821 CVE-2008-2927 ADV-2008-2032  View
17790 2821 CVE-2008-2927 http://www.zerodayinitiative.com/advisories/ZDI-08-054  View
17791 2821 CVE-2008-2927 adium-msnprotocol-code-execution(44774)  View
17792 2821 CVE-2008-2927 https://bugzilla.redhat.com/show_bug.cgi?id=453764  View
17793 2821 CVE-2008-2927 https://issues.rpath.com/browse/RPL-2647  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46206 JVNDB-2008-001516 Pidgin の MSN プロトコルハンドラにおける整数オーバーフローの脆弱性 Pidgin の libpurple/protocols/msnp9/slplink.c および libpurple/protocols/msn/slplink.c における MSN プロトコルハンドラの msn_slplink_process_msg 関数には、複数の整数オーバーフローの脆弱性があります。 CVE-2008-2927 33040 CVE-2008-2927 2821 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001516.html 2008-07-07 2008-07-30 View