Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1374
HistoryMay 26, 2009 - 3:30 p.m.

CVE-2009-1374

2009-05-2615:30:05
CWE-119
[email protected]
web.nvd.nist.gov
38
cve-2009-1374
buffer overflow
pidgin
decrypt function
denial of service
remote attack

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.113

Percentile

95.2%

JSON

Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.

Affected configurations

NVD
Node
pidginpidginRange≀2.5.5
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.0.2linux
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
OR
pidginpidginMatch2.4.2
OR
pidginpidginMatch2.4.3
OR
pidginpidginMatch2.5.0
OR
pidginpidginMatch2.5.1
OR
pidginpidginMatch2.5.2
OR
pidginpidginMatch2.5.3
OR
pidginpidginMatch2.5.4
VendorProductVersionCPE
pidginpidgin2.0.2cpe:/a:pidgin:pidgin:2.0.2:::
pidginpidgin2.0.1cpe:/a:pidgin:pidgin:2.0.1:::
pidginpidgin2.1.1cpe:/a:pidgin:pidgin:2.1.1:::
pidginpidgin2.5.4cpe:/a:pidgin:pidgin:2.5.4:::
pidginpidgin2.4.0cpe:/a:pidgin:pidgin:2.4.0:::
pidginpidgin2.5.3cpe:/a:pidgin:pidgin:2.5.3:::
pidginpidgin2.0.0cpe:/a:pidgin:pidgin:2.0.0:::
pidginpidgin2.5.0cpe:/a:pidgin:pidgin:2.5.0:::
pidginpidgin2.4.1cpe:/a:pidgin:pidgin:2.4.1:::
pidginpidgin2.2.1cpe:/a:pidgin:pidgin:2.2.1:::
Rows per page:
1-10 of 201

References

Related

ubuntucve 1
prion 1
veracode 1
nvd 1
debiancve 1
cvelist 1
nessus 15
centos 1
securityvulns 2
openvas 30
ubuntu 1
slackware 1
oraclelinux 1
seebug 1
freebsd 1
redhat 1
fedora 3
gentoo 1
debian 2
ubuntucve
ubuntucve
CVE-2009-1374
2009-05-26 00:00:00
prion
prion
Buffer overflow
2009-05-26 15:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:33:21
nvd
nvd
CVE-2009-1374
2009-05-26 15:30:05
debiancve
debiancve
CVE-2009-1374
2009-05-26 15:30:05
cvelist
cvelist
CVE-2009-1374
2009-05-26 15:16:00
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / current : pidgin (SSA:2009-146-01)
2009-05-27 00:00:00
Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerabilities (USN-781-1)
2009-06-04 00:00:00
centos
centos
finch, libpurple, pidgin security update
2009-05-22 21:24:35
securityvulns
securityvulns
Pidgin memory corruption
2009-05-26 00:00:00
[ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities
2009-05-26 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-781-1)
2009-06-05 00:00:00
Slackware Advisory SSA:2009-146-01 pidgin
2012-09-11 00:00:00
Pidgin Multiple Buffer Overflow Vulnerabilities (Windows)
2009-06-01 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2009-06-03 00:00:00
slackware
slackware
pidgin
2009-05-26 19:19:48
oraclelinux
oraclelinux
pidgin security update
2009-05-26 00:00:00
seebug
seebug
Pidgin倚δΈͺηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-05-25 00:00:00
freebsd
freebsd
pidgin -- multiple vulnerabilities
2009-06-03 00:00:00
redhat
redhat
(RHSA-2009:1060) Important: pidgin security update
2009-05-22 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: pidgin-2.5.6-1.fc9
2009-06-02 14:26:30
[SECURITY] Fedora 11 Update: pidgin-2.5.6-1.fc11
2009-06-02 14:28:31
[SECURITY] Fedora 10 Update: pidgin-2.5.6-1.fc10
2009-06-02 14:33:34
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-05-25 00:00:00
debian
debian
[Backports-security-announce] Security Update for pidgin
2009-07-29 21:34:46
[Backports-security-announce] Security Update for pidgin
2009-07-29 21:34:44

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.113

Percentile

95.2%

JSON
Related for CVE-2009-1374
ubuntucve1prion1veracode1nvd1debiancve1cvelist1nessus15centos1securityvulns2openvas30ubuntu1slackware1oraclelinux1seebug1freebsd1redhat1fedora3gentoo1debian2