CVE-2009-1373
Fixed in a distro release EPSS 4%
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.
Products: pidgin
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pidgin | 2.5.6-1 |
| Debian 13 | pidgin | 2.5.6-1 |
| Debian 14 | pidgin | 2.5.6-1 |
| Debian 5.0 | pidgin | 2.4.3-4lenny2 |
| Red Hat Enterprise Linux 3 | pidgin | 0:1.5.1-3.el3 |
| Red Hat Enterprise Linux 3 | pidgin-debuginfo | 0:1.5.1-3.el3 |
| Red Hat Enterprise Linux 4 | finch | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | finch-devel | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | libpurple | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | libpurple-devel | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | libpurple-perl | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | libpurple-tcl | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | pidgin | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | pidgin-debuginfo | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | pidgin-devel | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 4 | pidgin-perl | 0:2.5.5-2.el4 |
| Red Hat Enterprise Linux 5 | finch | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | finch-devel | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | libpurple | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | libpurple-devel | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | libpurple-perl | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | libpurple-tcl | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | pidgin | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | pidgin-debuginfo | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | pidgin-devel | 0:2.5.5-3.el5 |
| Red Hat Enterprise Linux 5 | pidgin-perl | 0:2.5.5-3.el5 |