CVE-2010-0277
N/A
Published: January 9, 2010 at 06:00 PM UTC
Updated: June 16, 2026 at 11:15 PM UTC
2 products affected across 2 vendorsPidginAdium
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- http://secunia.com/advisories/38563
References (26)
x_refsource_CONFIRM
Source: [email protected]
http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msnx_refsource_MISC
Source: [email protected]
http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htmlQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card