Red Hat Security AdvisoryRHSA-2009:1139
pidgin security and bug fix update
Released 2009-07-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.5.8-1.el4, finch-2.5.8-1.el4.i386, finch-2.5.8-1.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.5.8-1.el5, finch-2.5.8-1.el5.i386, libpurple-2.5.8-1.el5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.5.8-1.el5, finch-devel-2.5.8-1.el5.i386, libpurple-devel-2.5.8-1.el5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.5.8-1.el4, finch-2.5.8-1.el4.i386, finch-devel-2.5.8-1.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.5.8-1.el4, finch-2.5.8-1.el4.i386, finch-2.5.8-1.el4.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.5.8-1.el5, finch-2.5.8-1.el5.i386, finch-devel-2.5.8-1.el5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.5.8-1.el4, finch-2.5.8-1.el4.i386, finch-2.5.8-1.el4.ia64 +24
Fixes 1 record
Priority LOW 29
The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a craft…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03377 · Published 2009-07-01 · Fixed CWE-399
