Oval Definition:oval:org.mitre.oval:def:22833
Revision Date:2014-05-26Version:13
Title:ELSA-2009:1139: pidgin security and bug fix update (Moderate)
Description:The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1889
ELSA-2009:1139-01
Platform(s):Oracle Linux 5
Product(s):pidgin
Definition Synopsis
  • Oracle Linux 5.x
  • AND rpm test
  • libpurple-perl is earlier than 0:2.5.8-1.el5
  • OR finch is earlier than 0:2.5.8-1.el5
  • OR libpurple is earlier than 0:2.5.8-1.el5
  • OR pidgin is earlier than 0:2.5.8-1.el5
  • OR pidgin-devel is earlier than 0:2.5.8-1.el5
  • OR pidgin-perl is earlier than 0:2.5.8-1.el5
  • OR finch-devel is earlier than 0:2.5.8-1.el5
  • OR libpurple-devel is earlier than 0:2.5.8-1.el5
  • OR libpurple-tcl is earlier than 0:2.5.8-1.el5
    • BACK