Launchpad CVE tracker

CVE 2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Related bugs and status

CVE-2008-2927 (Candidate) is related to these bugs:

Bug #245769: [CVE-2008-2955, -2956, -2957] Pidgin denial of service vulnerabilities

Summary				In	Importance	Status
	245769	[CVE-2008-2955, -2956, -2957] Pidgin denial of service vulnerabilities		pidgin (Ubuntu)	Undecided	Fix Released

Bug #245770: [CVE-2008-2927] MSN integer overflow in Pidgin

		In	Importance	Status
245770	[CVE-2008-2927] MSN integer overflow in Pidgin	pidgin (Ubuntu)	Undecided	Fix Released
245770	[CVE-2008-2927] MSN integer overflow in Pidgin	pidgin (Debian)	Unknown	Fix Released
245770	[CVE-2008-2927] MSN integer overflow in Pidgin	pidgin (Fedora)	Medium	Fix Released

Bug #247140: pidgin MSN protocol integer overflow in slplink.c

Summary				In	Importance	Status
	247140	pidgin MSN protocol integer overflow in slplink.c		Ubuntu Japanese Kaizen Project	Medium	Triaged

Bug #251304: Pidgin XMPP TLS/SSL Man in the Middle attack

		In	Importance	Status
251304	Pidgin XMPP TLS/SSL Man in the Middle attack	pidgin (Ubuntu)	Undecided	Fix Released
251304	Pidgin XMPP TLS/SSL Man in the Middle attack	pidgin (Debian)	Unknown	Fix Released
251304	Pidgin XMPP TLS/SSL Man in the Middle attack	Pidgin	Unknown	Fix Released

Bug #270884: [FFe] Please sync msn-pecan 0.0.16-1 from Debian unstable (main)

Summary				In	Importance	Status
	270884	[FFe] Please sync msn-pecan 0.0.16-1 from Debian unstable (main)		msn-pecan (Ubuntu)	Wishlist	Fix Released

Bug #416306: CVE-2009-2694 Security vulnerability in pidgin < 2.5.9

		In	Importance	Status
416306	CVE-2009-2694 Security vulnerability in pidgin < 2.5.9	pidgin (Ubuntu)	Undecided	Fix Released
416306	CVE-2009-2694 Security vulnerability in pidgin < 2.5.9	pidgin (Debian)	Unknown	Fix Released
416306	CVE-2009-2694 Security vulnerability in pidgin < 2.5.9	pidgin (Gentoo Linux)	Medium	Fix Released
416306	CVE-2009-2694 Security vulnerability in pidgin < 2.5.9	pidgin (Fedora)	Critical	Fix Released
416306	CVE-2009-2694 Security vulnerability in pidgin < 2.5.9	Pidgin	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2008-2927

References