NVD

Id
48661  
Name
CVE-2009-1376  
Description
Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-26  
Modified Date
2013-11-02  
Seq
2009-1376  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245653 48661 CVE-2009-1376 DSA-1805  View
245654 48661 CVE-2009-1376 oval:org.mitre.oval:def:10476  View
245655 48661 CVE-2009-1376 oval:org.mitre.oval:def:18432  View
245656 48661 CVE-2009-1376 GLSA-200905-07  View
245657 48661 CVE-2009-1376 MDVSA-2009:140  View
245658 48661 CVE-2009-1376 MDVSA-2009:173  View
245659 48661 CVE-2009-1376 http://www.pidgin.im/news/security/?id=32  View
245660 48661 CVE-2009-1376 RHSA-2009:1059  View
245661 48661 CVE-2009-1376 RHSA-2009:1060  View
245662 48661 CVE-2009-1376 35067  View
245663 48661 CVE-2009-1376 USN-781-1  View
245664 48661 CVE-2009-1376 USN-781-2  View
245665 48661 CVE-2009-1376 ADV-2009-1396  View
245666 48661 CVE-2009-1376 pidgin-msn-slp-bo(50680)  View
245667 48661 CVE-2009-1376 https://bugzilla.redhat.com/show_bug.cgi?id=500493  View
245668 48661 CVE-2009-1376 FEDORA-2009-5552  View
245669 48661 CVE-2009-1376 FEDORA-2009-5583  View
245670 48661 CVE-2009-1376 FEDORA-2009-5597  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40545 JVNDB-2009-001551 Pidgin の msn_slplink_process_msg 関数における整数オーバーフローの脆弱性 32 ビットプラットフォーム上で稼働している Pidgin の libpurple/protocols/msn/slplink.c および libpurple/protocols/msnp9/slplink.c に含まれる MSN プロコルハンドラ にある msn_slplink_process_msg 関数には、SLP メッセージの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-1376 38807 CVE-2009-1376 48661 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001551.html 2009-05-02 2009-07-01 View