A heap-based buffer overflow vulnerability in the MSN protocol handler of libpurple(3), the shared library that adds support for various instant messaging networks to the pidgin(1) Instant Messaging client (previously known as Gaim), may allow remote unprivileged users to execute arbitrary code or cause a Denial of Service (DoS) through an application crash.

Additional information on this issue can be found in the following document:

    CVE-2009-2694 at:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694
Permalink |