USN-1014-1: Pidgin vulnerabilities

Packages

pidgin -

Details

Pierre Noguès discovered that Pidgin incorrectly handled malformed SLP
messages in the MSN protocol handler. A remote attacker could send a
specially crafted message and cause Pidgin to crash, leading to a denial
of service. This issue only affected Ubuntu 8.04 LTS, 9.10 and 10.04 LTS.
(CVE-2010-1624)

Daniel Atallah discovered that Pidgin incorrectly handled the return code
of the Base64 decoding function. A remote attacker could send a specially
crafted message and cause Pidgin to crash, leading to a denial of service.
(CVE-2010-3711)

Pierre Noguès discovered that Pidgin incorrectly handled malformed SLP
messages in the MSN protocol handler. A remote attacker could send a
specially crafted message and cause Pidgin to crash, leading to a denial
of service. This issue only affected Ubuntu 8.04 LTS, 9.10 and 10.04 LTS.
(CVE-2010-1624)

Daniel Atallah discovered that Pidgin incorrectly handled the return code
of the Base64 decoding function. A remote attacker could send a specially
crafted message and cause Pidgin to crash, leading to a denial of service.
(CVE-2010-3711)

Update instructions

After a standard system update you need to restart Pidgin to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
9.10 karmic	pidgin – 1:2.6.2-1ubuntu7.3
8.04 hardy	pidgin – 1:2.4.1-1ubuntu2.10
10.10 maverick	pidgin – 1:2.7.3-1ubuntu3.1
10.04 lucid	pidgin – 1:2.6.6-1ubuntu4.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References