Pidgin Yahoo Instant Messenger Protocol Link Denial of Service Vulnerability

Bugtraq ID:	36367
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-3025
Remote:	Yes
Local:	No
Published:	Aug 19 2009 12:00AM
Updated:	Jan 12 2010 04:32PM
Credit:	Reported by the vendor
Vulnerable:	SuSE SUSE Linux Enterprise 11 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Pidgin Pidgin 2.6 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5
Not Vulnerable:	Pidgin Pidgin 2.6.1

Pidgin Yahoo Instant Messenger Protocol Link Denial of Service Vulnerability

Pidgin is prone to a denial-of-service vulnerability.

Successful exploits will cause the affected application to crash, effectively denying service to legitimate users.

Pidgin Yahoo Instant Messenger Protocol Link Denial of Service Vulnerability

Attackers can exploit this issue by crafting and sending a malicious link to an unsuspecting victim using the Yahoo Instant Messenger protocol.

Pidgin Yahoo Instant Messenger Protocol Link Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.


Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva finch-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64finch0-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple-devel-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple0-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva finch-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64finch0-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple-devel-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple0-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva finch-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64finch0-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple-devel-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple0-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva finch-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfinch0-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple-devel-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple0-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva finch-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfinch0-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple-devel-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple0-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0

• Mandriva finch-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfinch0-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple-devel-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple0-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1

• Mandriva finch-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfinch0-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple-devel-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpurple0-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva finch-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64finch0-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple-devel-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64purple0-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-bonjour-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-client-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-gevolution-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-i18n-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-meanwhile-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-mono-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-perl-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-plugins-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-silc-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva pidgin-tcl-2.6.2-1.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Pidgin Pidgin 2.6

• Pidgin pidgin-2.6.2.exe
  http://sourceforge.net/projects/pidgin/files/Pidgin/pidgin-2.6.2.exe

Pidgin Yahoo Instant Messenger Protocol Link Denial of Service Vulnerability

References:

• Pidgin Changelog (Pidgin)
  
• Pidgin Homepage (Pidgin)