Fluid Attacks Database

Description

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	pidgin	>=0 <2.5.6-1	2.5.6-1
debian 14	pidgin	>=0 <2.5.6-1	2.5.6-1
rpm rhel5	pidgin	<0:2.5.5-3.el5	0:2.5.5-3.el5
debian 11	pidgin	>=0 <2.5.6-1	2.5.6-1
debian 13	pidgin	>=0 <2.5.6-1	2.5.6-1

Aliases

1. CVE-2009-13732. NVD-2009-13733. OSV-DEBIAN-2009-13734. OSV-2009-13735. SECURITY-TRACKER-CVE-2009-1373

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.