MSN user name change to often causes msg box overflow and kills client

Bug #319354 reported by James Michael DuPont
4
Affects Status Importance Assigned to Milestone
pidgin (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: pidgin

If the MSN user changes its name too often, then
there is an error msg that shows up, it does not say which user, just that it was too often.
If the name continues to change too often, there will be hundreds of such boxes open.
this is a form of an attack,and can kill the client process and block then entire session.

Revision history for this message
Kees Cook (kees) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. While it does allow for a limited denial of service, this should be handled as a normal bug. Please feel free to report any other bugs you may find.

security vulnerability: yes → no
visibility: private → public
Revision history for this message
Pedro Villavicencio (pedro) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better.You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering is this still an issue for you? Do you get the same with Lucid or Maverick? Thanks in advance.

Changed in pidgin (Ubuntu):
status: New → Incomplete
Revision history for this message
Pedro Villavicencio (pedro) wrote :

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to New. Thanks again!.

Changed in pidgin (Ubuntu):
status: Incomplete → Invalid
Revision history for this message
James Michael DuPont (jamesmikedupont) wrote : Re: [Bug 319354] MSN user name change to often causes msg box overflow and kills client

What information are you missing? It should be pretty clear.
Someone changed their name so many times and for every time it created
some popup message
 that it created thousands of popups on my screen, my computer froze up.
I had to kill xwindows.

On Wed, Oct 20, 2010 at 5:46 PM, Pedro Villavicencio <email address hidden> wrote:
> We are closing this bug report because it lacks the information we need
> to investigate the problem, as described in the previous comments.
> Please reopen it if you can give us the missing information, and don't
> hesitate to submit bug reports in the future. To reopen the bug report
> you can click on the current status, under the Status column, and change
> the Status back to New. Thanks again!.
>
> ** Changed in: pidgin (Ubuntu)
>       Status: Incomplete => Invalid
>
> --
> MSN user name change to often causes msg box overflow and kills client
> https://bugs.launchpad.net/bugs/319354
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “pidgin” package in Ubuntu: Invalid
>
> Bug description:
> Binary package hint: pidgin
>
> If the MSN user changes its name too often, then
> there is an error msg that shows up, it does not say which user, just that it was too often.
> If the name continues to change too often, there will be hundreds of such boxes open.
> this is a form of an attack,and can kill the client process and block then entire session.
>
> To unsubscribe from this bug, go to:
> https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/319354/+subscribe
>

--
James Michael DuPont
Member of Free Libre Open Source Software Kosova and Albania
flossk.org flossal.org

Revision history for this message
James Michael DuPont (jamesmikedupont) wrote :

What information are you missing? When did you ask for it?

It should be pretty clear.
Someone changed their name so many times and for every time it created
some popup message
 that it created thousands of popups on my screen, my computer froze up.
I had to kill xwindows.

Changed in pidgin (Ubuntu):
status: Invalid → New
Revision history for this message
Mörgæs (moergaes) wrote :

Is this still a problem in 13.10?

Revision history for this message
James Michael DuPont (jamesmikedupont) wrote : Re: [Bug 319354] Re: MSN user name change to often causes msg box overflow and kills client

i dont know, i guess i could create a test case for it. I am very busy
right now.

On Sun, Nov 24, 2013 at 4:56 PM, Mörgæs <email address hidden> wrote:
> Is this still a problem in 13.10?
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/319354
>
> Title:
> MSN user name change to often causes msg box overflow and kills client
>
> Status in “pidgin” package in Ubuntu:
> New
>
> Bug description:
> Binary package hint: pidgin
>
> If the MSN user changes its name too often, then
> there is an error msg that shows up, it does not say which user, just that it was too often.
> If the name continues to change too often, there will be hundreds of such boxes open.
> this is a form of an attack,and can kill the client process and block then entire session.
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/319354/+subscriptions

--
James Michael DuPont
Member of Free Libre Open Source Software Kosova http://flossk.org
Saving wikipedia(tm) articles from deletion http://SpeedyDeletion.wikia.com
Contributor FOSM, the CC-BY-SA map of the world http://fosm.org
Mozilla Rep https://reps.mozilla.org/u/h4ck3rm1k3
Free Software Foundation Europe Fellow http://fsfe.org/support/?h4ck3rm1k3

Revision history for this message
Mörgæs (moergaes) wrote :

Closing due to age.
If a similar bug appears in Ubuntu 14.04 please open a new report.

Changed in pidgin (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.