Red Hat Security AdvisoryRHSA-2009:1536
pidgin security update
Released 2009-10-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.6.3-2.el4, finch-2.6.3-2.el4.i386, finch-2.6.3-2.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.6.3-2.el5, finch-2.6.3-2.el5.i386, libpurple-2.6.3-2.el5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.6.3-2.el5, finch-devel-2.6.3-2.el5.i386, libpurple-devel-2.6.3-2.el5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.6.3-2.el4, finch-2.6.3-2.el4.i386, finch-devel-2.6.3-2.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.6.3-2.el4, finch-2.6.3-2.el4.i386, finch-2.6.3-2.el4.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.6.3-2.el5, finch-2.6.3-2.el5.i386, finch-devel-2.6.3-2.el5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.6.3-2.el4, finch-2.6.3-2.el4.i386, finch-2.6.3-2.el4.ia64 +24
Fixes 1 record
Priority LOW 28
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02661 · Published 2009-10-20 · Fixed CWE-399
