CVE-2008-2927

Published: Jul 7, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Affected (25)

Products: Pidgin: Pidgin · Adium: Adium

1 product

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Pidgin Pidgin	version ≤ 2.4.2
Pidgin Pidgin	Version 2.0.0
Pidgin Pidgin	Version 2.0.1
Pidgin Pidgin	Version 2.0.2
Pidgin Pidgin	Version 2.1.0
Pidgin Pidgin	Version 2.1.1
Pidgin Pidgin	Version 2.2.0
Pidgin Pidgin	Version 2.2.1
Pidgin Pidgin	Version 2.2.2
Pidgin Pidgin	Version 2.3.0
Pidgin Pidgin	Version 2.3.1
Pidgin Pidgin	Version 2.4.0
Pidgin Pidgin	Version 2.4.1

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Adium Adium	version ≤ 1.2.7
Adium Adium	Version 1.0.1
Adium Adium	Version 1.0.2
Adium Adium	Version 1.0.3
Adium Adium	Version 1.0.4
Adium Adium	Version 1.0.5
Adium Adium	Version 1.0
Adium Adium	Version 1.1.1
Adium Adium	Version 1.1.2
Adium Adium	Version 1.1.3
Adium Adium	Version 1.1.4
Adium Adium	Version 1.1

Related CWEs

CWE-189

References (62)

http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c

Source: secalert@redhat.com

http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c

Source: secalert@redhat.com

http://secunia.com/advisories/30971

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31016

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31105

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31387

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31642

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32859

Source: secalert@redhat.com

http://secunia.com/advisories/32861

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1610

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:143

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:127

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/07/03/6

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/07/04/1

Source: secalert@redhat.com

http://www.pidgin.im/news/security/?id=25

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0584.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/493682

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/495165/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/495818/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29956

Source: secalert@redhat.com

http://www.securitytracker.com/id?1020451

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-675-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-675-2

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2032/references

Source: secalert@redhat.com

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-08-054

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=453764

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44774

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2647

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972

Source: secalert@redhat.com

http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c