Pidgin < 2.5.9 'msn_slplink_process_msg()' Memory Corruption

high Nessus Plugin ID 40663

Synopsis

The remote host has an instant messaging client that is affected by a memory corruption vulnerability.

Description

The version of Pidgin installed on the remote host is earlier than 2.5.9. Such versions are reportedly affected by a vulnerability in 'msn_slplink_process_msg()'. Maliciously crafted MSN SLP messages can result in memory corruption. A remote attacker could use this to crash the client, or execute arbitrary code.

This attack does not require user interaction or that the attacker is in the victim's buddy list (using the default configuration).

Solution

Upgrade to Pidgin 2.5.9 or later.

See Also

http://www.coresecurity.com/content/libpurple-arbitrary-write

https://seclists.org/bugtraq/2009/Aug/174

http://pidgin.im/news/security/?id=34

Plugin Details

Severity: High

ID: 40663

File Name: pidgin_2_5_9.nasl

Version: 1.11

Type: local

Agent: windows

Family: Windows

Published: 8/20/2009

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:pidgin:pidgin

Required KB Items: SMB/Pidgin/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/18/2009

Vulnerability Publication Date: 8/18/2009

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-2694

BID: 36071

CWE: 399

Secunia: 36384