vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-2694

N/A
Published: August 20, 2009 at 10:00 PM UTC
Updated: June 16, 2026 at 11:10 PM UTC
2 products affected across 2 vendorsPidginAdium

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 20%

Description

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (19)

x_refsource_CONFIRMPatch
Source: [email protected]
http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e
x_refsource_CONFIRM
Source: [email protected]
http://developer.pidgin.im/wiki/ChangeLog
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/36384
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/36392
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/36401
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/36402
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/36708
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/37071

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card