The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.

GNOME 2.6.0_x86: Instant Messaging patch.
Date this patch was last updated by Sun : Nov/30/10

GNOME 2.6.0: Instant Messaging patch.
Date this patch was last updated by Sun : Nov/30/10

From Red Hat Security Advisory 2010:0788 :

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously.

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol (XMPP) protocol plug-ins, or using the Microsoft NT LAN Manager (NTLM) protocol for authentication. (CVE-2010-3711)

A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in processed custom emoticon messages. A remote attacker could use this flaw to crash Pidgin by sending specially crafted emoticon messages during mutual communication. (CVE-2010-1624)

Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Daniel Atallah as the original reporter of CVE-2010-3711, and Pierre Nogues of Meta Security as the original reporter of CVE-2010-1624.

All Pidgin users should upgrade to these updated packages, which contain backported patches to resolve these issues. Pidgin must be restarted for this update to take effect.

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol (XMPP) protocol plug-ins, or using the Microsoft NT LAN Manager (NTLM) protocol for authentication. (CVE-2010-3711)

A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in processed custom emoticon messages. A remote attacker could use this flaw to crash Pidgin by sending specially crafted emoticon messages during mutual communication. (CVE-2010-1624)

Pidgin must be restarted for this update to take effect.

This update fixes the following security issues :

  - 604225: MSN emoticon DoS. (CVE-2010-1624)

  - 648273: multiple NULL pointer dereference weaknesses.
    (CVE-2010-3711)

  - 722199: vulnerability in SILC protocol handling     (CVE-2011-3594)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously.

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol (XMPP) protocol plug-ins, or using the Microsoft NT LAN Manager (NTLM) protocol for authentication. (CVE-2010-3711)

A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in processed custom emoticon messages. A remote attacker could use this flaw to crash Pidgin by sending specially crafted emoticon messages during mutual communication. (CVE-2010-1624)

Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Daniel Atallah as the original reporter of CVE-2010-3711, and Pierre Nogues of Meta Security as the original reporter of CVE-2010-1624.

All Pidgin users should upgrade to these updated packages, which contain backported patches to resolve these issues. Pidgin must be restarted for this update to take effect.

Pierre Nogues discovered that Pidgin incorrectly handled malformed SLP messages in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, 9.10 and 10.04 LTS. (CVE-2010-1624)

Daniel Atallah discovered that Pidgin incorrectly handled the return code of the Base64 decoding function. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. (CVE-2010-3711).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: * http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: * Use System SSL Certificates * Add additional dependencies for Voice + Video

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A security vulnerability has been identified and fixed in pidgin :

The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service (application crash) via a custom emoticon in a malformed SLP message (CVE-2010-1624).

Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products.

The updated packages have been patched to correct this issue.

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue.

ID	Name	Product	Family	Severity
108035	Solaris 10 (x86) : 143318-03	Nessus	Solaris Local Security Checks	medium
107540	Solaris 10 (sparc) : 143317-03	Nessus	Solaris Local Security Checks	medium
68124	Oracle Linux 4 : pidgin (ELSA-2010-0788)	Nessus	Oracle Linux Local Security Checks	medium
60876	Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
57186	SuSE 10 Security Update : pidgin, libpurple and finch (ZYPP Patch Number 7827)	Nessus	SuSE Local Security Checks	medium
57100	SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)	Nessus	SuSE Local Security Checks	medium
57099	SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)	Nessus	SuSE Local Security Checks	medium
50796	CentOS 4 / 5 : pidgin (CESA-2010:0788)	Nessus	CentOS Local Security Checks	medium
50492	Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : pidgin vulnerabilities (USN-1014-1)	Nessus	Ubuntu Local Security Checks	medium
50297	RHEL 4 / 5 : pidgin (RHSA-2010:0788)	Nessus	Red Hat Local Security Checks	medium
47496	Fedora 12 : pidgin-2.7.0-2.fc12 (2010-8524)	Nessus	Fedora Local Security Checks	medium
47495	Fedora 11 : pidgin-2.7.0-2.fc11 (2010-8523)	Nessus	Fedora Local Security Checks	critical
47494	Fedora 13 : pidgin-2.7.0-2.fc13 (2010-8503)	Nessus	Fedora Local Security Checks	medium
46663	Mandriva Linux Security Advisory : pidgin (MDVSA-2010:097)	Nessus	Mandriva Local Security Checks	medium
46358	Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : pidgin (SSA:2010-138-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2010-1624

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium