NetSight
IP …
critical10.0Public exploit code

CVE-2009-2694

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.

Affected products

VendorProductAffected versions
AdiumAdium
through 1.3.5
Versions 1.2.7, 1.3, 1.3.1, 1.3.2, 1.3.3
PidginPidgin
through 2.5.8
Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1

Weakness classification

CWE-399

References