Fluid Attacks Database

Description

Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	pidgin	>=0 <2.5.6-1	2.5.6-1
debian 12	pidgin	>=0 <2.5.6-1	2.5.6-1
debian 13	pidgin	>=0 <2.5.6-1	2.5.6-1
debian 14	pidgin	>=0 <2.5.6-1	2.5.6-1
rpm rhel5	pidgin	<0:2.5.5-3.el5	0:2.5.5-3.el5

Aliases

1. CVE-2009-13742. NVD-2009-13743. OSV-DEBIAN-2009-13744. OSV-2009-13745. SECURITY-TRACKER-CVE-2009-1374

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.