CVE-2009-3615

Publication date 20 October 2009

Last updated 24 July 2024


Ubuntu priority

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.

Status

Package Ubuntu Release Status
pidgin 9.10 karmic
Fixed 1:2.6.2-1ubuntu7.1
9.04 jaunty
Fixed 1:2.5.5-1ubuntu8.5
8.10 intrepid
Fixed 1:2.5.2-0ubuntu1.6
8.04 LTS hardy
Fixed 1:2.4.1-1ubuntu2.8
6.06 LTS dapper Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
pidgin

References

Related Ubuntu Security Notices (USN)

    • USN-886-1
    • Pidgin vulnerabilities
    • 18 January 2010

Other references