CVE-2010-0277

Published: Jan 9, 2010Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

Affected (30)

Products: Adium: Adium · Pidgin: Pidgin

1 product

1 product

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Adium Adium	Version 1.3.8
Pidgin Pidgin	Up to 2.6.5
Pidgin Pidgin	Version 2.0.0
Pidgin Pidgin	Version 2.0.1
Pidgin Pidgin	Version 2.0.2
Pidgin Pidgin	Version 2.1.0
Pidgin Pidgin	Version 2.1.1
Pidgin Pidgin	Version 2.2.0
Pidgin Pidgin	Version 2.2.1
Pidgin Pidgin	Version 2.2.2
Pidgin Pidgin	Version 2.3.0
Pidgin Pidgin	Version 2.3.1
Pidgin Pidgin	Version 2.4.0
Pidgin Pidgin	Version 2.4.1
Pidgin Pidgin	Version 2.4.2
Pidgin Pidgin	Version 2.4.3
Pidgin Pidgin	Version 2.5.0
Pidgin Pidgin	Version 2.5.1
Pidgin Pidgin	Version 2.5.2
Pidgin Pidgin	Version 2.5.3
Pidgin Pidgin	Version 2.5.4
Pidgin Pidgin	Version 2.5.5
Pidgin Pidgin	Version 2.5.6
Pidgin Pidgin	Version 2.5.7
Pidgin Pidgin	Version 2.5.8
Pidgin Pidgin	Version 2.5.9
Pidgin Pidgin	Version 2.6.0
Pidgin Pidgin	Version 2.6.1
Pidgin Pidgin	Version 2.6.2
Pidgin Pidgin	Version 2.6.4

Related CWEs

References (52)

http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn

Source: cve@mitre.org

http://developer.pidgin.im/wiki/ChangeLog

Source: cve@mitre.org

http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: cve@mitre.org

http://pidgin.im/news/security/?id=43

Source: cve@mitre.org

http://secunia.com/advisories/38563

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38640

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38658

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38712

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38915

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41868

Source: cve@mitre.org

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:041

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:085

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2010/01/07/2

Source: cve@mitre.org

http://www.securityfocus.com/bid/38294

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-902-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/0413

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1020

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2693

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=554335

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2010-0115.html

Source: cve@mitre.org

http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn

Source: af854a3a-2127-422b-91ae-364da2661108

http://developer.pidgin.im/wiki/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://pidgin.im/news/security/?id=43

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38563

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38640

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38658

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38712

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38915

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/41868

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:041

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:085

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/01/07/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/38294

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-902-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0413

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1020

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2693

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=554335

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421

Source: af854a3a-2127-422b-91ae-364da2661108

https://rhn.redhat.com/errata/RHSA-2010-0115.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.