directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session.

A NULL pointer dereference DoS has been fixed in pidgin. CVE-2010-4528 has been assigned to this issue.

New release 2.7.9

Upstream ChangeLog :

http://developer.pidgin.im/wiki/ChangeLog

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A NULL pointer dereference due to receiving a short packet for a direct connection in the MSN code could potentially cause a denial of service.

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

This update provides pidgin 2.7.8 that has been patched to address this flaw.

ID	Name	Product	Family	Severity
75488	openSUSE Security Update : finch (openSUSE-SU-2011:0021-1)	Nessus	SuSE Local Security Checks	medium
53717	openSUSE Security Update : finch (openSUSE-SU-2011:0021-1)	Nessus	SuSE Local Security Checks	medium
51441	Fedora 13 : pidgin-2.7.9-1.fc13 (2010-19317)	Nessus	Fedora Local Security Checks	medium
51419	Fedora 14 : pidgin-2.7.9-1.fc14 (2010-19314)	Nessus	Fedora Local Security Checks	medium
51380	Mandriva Linux Security Advisory : pidgin (MDVSA-2010:259)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2010-4528

medium

Tenable Plugins

medium

medium

medium

medium

medium