NVD

Id
49154  
Name
CVE-2009-1889  
Description
The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-07-01  
Modified Date
2011-09-14  
Seq
2009-1889  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248781 49154 CVE-2009-1889 http://developer.pidgin.im/ticket/9483  View
248782 49154 CVE-2009-1889 oval:org.mitre.oval:def:10004  View
248783 49154 CVE-2009-1889 [devel] 20090528 [patch] libpurple/protocols/oscar: OOM and die on misparsed ICQWebMessage as ICQSMS  View
248784 49154 CVE-2009-1889 RHSA-2009:1139  View
248785 49154 CVE-2009-1889 35530  View
248786 49154 CVE-2009-1889 USN-796-1  View
248787 49154 CVE-2009-1889 ADV-2009-1749  View
248788 49154 CVE-2009-1889 pidgin-oscar-dos(51448)  View
248789 49154 CVE-2009-1889 https://bugzilla.redhat.com/show_bug.cgi?id=508738  View
248790 49154 CVE-2009-1889 FEDORA-2009-7359  View
248791 49154 CVE-2009-1889 FEDORA-2009-7370  View
248792 49154 CVE-2009-1889 FEDORA-2009-7415  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40876 JVNDB-2009-001882 Pidgin の OSCAR プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 Pidgin の OSCAR プロトコル実装には、ICQWebMessage メッセージタイプを ICQSMS メッセージタイプとして間違って解釈するため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1889 39320 CVE-2009-1889 49154 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001882.html 2009-05-28 2009-08-14 View