Red Hat Security AdvisoryRHSA-2009:1059
pidgin security update
Released 2009-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 pidgin-1.5.1-3.el3, pidgin-1.5.1-3.el3.i386
- Red Hat Enterprise Linux AS version 3 pidgin-1.5.1-3.el3, pidgin-1.5.1-3.el3.i386, pidgin-1.5.1-3.el3.ia64 +1
- Red Hat Enterprise Linux ES version 3 pidgin-1.5.1-3.el3, pidgin-1.5.1-3.el3.i386, pidgin-1.5.1-3.el3.ia64
- Red Hat Enterprise Linux WS version 3 pidgin-1.5.1-3.el3, pidgin-1.5.1-3.el3.i386, pidgin-1.5.1-3.el3.ia64
Fixes 2 records
Priority MEDIUM 55
Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13294 · Published 2009-05-26 · Fixed CWE-189
Priority LOW 38
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.
CVSS 2.0HIGH 7.1· Network · Low privileges · Interaction — · EPSS 0.04272 · Published 2009-05-26 · Fixed CWE-119
