Unscored severity · published May 26, 2009
CVE-2009-1373
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pidgin · Pidgin
through 2.5.5; 2.0.0; 2.0.1; 2.0.2; 2.0.2; 2.1.0; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1373
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1373
debian.org
http://debian.org/security/2009/dsa-1805
secunia.com
http://secunia.com/advisories/35188
Vendor Advisory
http://secunia.com/advisories/35194
Vendor Advisory
http://secunia.com/advisories/35202
secunia.com
http://secunia.com/advisories/35215
secunia.com
http://secunia.com/advisories/35294
More from Pidgin
9.8
CVE-2016-1000030
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and…
9.8
CVE-2017-2640
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content
8.1
CVE-2016-2378
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin
8.1
CVE-2016-2377
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
8.1
CVE-2016-2376
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin