CVE-2009-2694 Memory corruption in n/a
Remote attackers can execute arbitrary code or cause denial of service in Pidgin and Adium via crafted MSNSLP messages due to memory corruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-2694?
CVE-2009-2694 is a critical memory corruption vulnerability in Pidgin Pidgin, published on 20 Aug 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
Weakness: CWE-399
Which versions are affected by CVE-2009-2694?
It affects 2 products.
Linux distribution packages (40)
pidgin Red Hat:enterprise_linux:3::as | All versions | 0:1.5.1-4.el3 |
pidgin-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:1.5.1-4.el3 |
pidgin Red Hat:enterprise_linux:3::desktop | All versions | 0:1.5.1-4.el3 |
pidgin-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:1.5.1-4.el3 |
pidgin Red Hat:enterprise_linux:3::es | All versions | 0:1.5.1-4.el3 |
pidgin-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:1.5.1-4.el3 |
pidgin Red Hat:enterprise_linux:3::ws | All versions | 0:1.5.1-4.el3 |
pidgin-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:1.5.1-4.el3 |
finch Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
finch-devel Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
libpurple Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
libpurple-devel Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
libpurple-perl Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
libpurple-tcl Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
pidgin Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
pidgin-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
pidgin-devel Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
pidgin-perl Red Hat:enterprise_linux:4::as | All versions | 0:2.5.9-1.el4 |
finch Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
finch-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
libpurple Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
libpurple-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
libpurple-perl Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
libpurple-tcl Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
pidgin Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
pidgin-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
pidgin-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
pidgin-perl Red Hat:enterprise_linux:4::desktop | All versions | 0:2.5.9-1.el4 |
finch Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
finch-devel Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
libpurple Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
libpurple-devel Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
libpurple-perl Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
libpurple-tcl Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
pidgin Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
pidgin-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
pidgin-devel Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
pidgin-perl Red Hat:enterprise_linux:4::es | All versions | 0:2.5.9-1.el4 |
finch Red Hat:enterprise_linux:4::ws | All versions | 0:2.5.9-1.el4 |
finch-devel Red Hat:enterprise_linux:4::ws | All versions | 0:2.5.9-1.el4 |
Products include Adium Adium, Pidgin Pidgin.
How do I fix CVE-2009-2694?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2009-2694 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-2694 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Pidgin Pidgin
Sources
Also known as DEBIAN-CVE-2009-2694, DSA-1870-1, GHSA-gg6v-c4q4-582f, RHSA-2009:1218.