| Definition Id: oval:org.mitre.oval:def:6322 |
Date: 2009-09-24 |
| Title: |
Pidgin before 2.6.2 allow denial of service via SLP invite message |
| Description: |
The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client. |
| Version: |
1 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2009-3083
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista |
Product(s): |
Pidgin Messanger |
| Definition Synopsis: |
|
|