CVE-2009-1889

Published: Jul 1, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.

Affected (26)

Products: Pidgin: Pidgin

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Pidgin Pidgin	Up to 2.5.7
Pidgin Pidgin	Version 2.0.0
Pidgin Pidgin	Version 2.0.1
Pidgin Pidgin	Version 2.0.2
Pidgin Pidgin	Version 2.0.2
Pidgin Pidgin	Version 2.1.0
Pidgin Pidgin	Version 2.1.1
Pidgin Pidgin	Version 2.2.0
Pidgin Pidgin	Version 2.2.1
Pidgin Pidgin	Version 2.2.2
Pidgin Pidgin	Version 2.3.0
Pidgin Pidgin	Version 2.3.1
Pidgin Pidgin	Version 2.4.0
Pidgin Pidgin	Version 2.4.1
Pidgin Pidgin	Version 2.4.2
Pidgin Pidgin	Version 2.4.3
Pidgin Pidgin	Version 2.5.0
Pidgin Pidgin	Version 2.5.1
Pidgin Pidgin	Version 2.5.2
Pidgin Pidgin	Version 2.5.3
Pidgin Pidgin	Version 2.5.3 32_bit
Pidgin Pidgin	Version 2.5.4
Pidgin Pidgin	Version 2.5.4 32_bit
Pidgin Pidgin	Version 2.5.5
Pidgin Pidgin	Version 2.5.5 32_bit
Pidgin Pidgin	Version 2.5.6

Related CWEs

References (32)

http://developer.pidgin.im/ticket/9483

Source: secalert@redhat.com

PatchVendor Advisory

http://pidgin.im/pipermail/devel/2009-May/008227.html

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/35693

Source: secalert@redhat.com

http://secunia.com/advisories/35697

Source: secalert@redhat.com

http://secunia.com/advisories/35706

Source: secalert@redhat.com

http://secunia.com/advisories/37071

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-1139.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/35530

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-796-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1749

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=508738

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/51448

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html

Source: secalert@redhat.com

http://developer.pidgin.im/ticket/9483

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://pidgin.im/pipermail/devel/2009-May/008227.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/35693

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35697

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35706

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37071

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1139.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/35530

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-796-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1749

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=508738

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/51448

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.