NetSight
IP …
medium5.0

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers…

Impact

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.

Affected products

VendorProductAffected versions
PidginPidgin
through 2.5.7
Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1

Weakness classification

CWE-399

References