CVE-2009-1376

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 13%

from disclosure to weapon106 days

Published on NVDMay 26

1st PoC+106d

exploitation probability

13%top 4% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9615

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References