The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://developer.pidgin.im/ticket/10481 - | |
| References | () http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0 - | |
| References | () http://developer.pidgin.im/wiki/ChangeLog - Patch | |
| References | () http://secunia.com/advisories/37017 - Vendor Advisory | |
| References | () http://secunia.com/advisories/37072 - Vendor Advisory | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 - | |
| References | () http://www.pidgin.im/news/security/?id=41 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/36719 - | |
| References | () http://www.vupen.com/english/advisories/2009/2949 - Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2009/2951 - Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2010/1020 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/53807 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414 - |
Information
Published : 2009-10-20 17:30
Updated : 2024-11-21 01:07
NVD link : CVE-2009-3615
Mitre link : CVE-2009-3615
CVE.ORG link : CVE-2009-3615
JSON object : View
Products Affected
pidgin
- pidgin
adium
- adium
CWE
CWE-399
Resource Management Errors