Debian
pidgin package

  1. Bug #245770
  2. Comment #5

Comment 5 for bug 245770

Revision history for this message
In , Josh (josh-redhat-bugs) wrote :

An integer overflow in Pidgin's MSN protocol handler could allow malformed SLP
message to cause an integer overflow, which could result in arbitrary code
execution.

This flaw is only exploitable by individuals who can message a user, which is
controlled by the Pidgin privacy setting. The default setting is to only allow
messages from users in the buddy list.