CVE-2009-1376

no score yetEPSS 13%

pidgin pidgin: no CVSS score yet. EPSS 13% chance of exploitation in the next 30 days.

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2009-05-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pidgin:pidgin

References

http://debian.org/security/2009/dsa-1805
http://secunia.com/advisories/35188
http://secunia.com/advisories/35194
http://secunia.com/advisories/35202
http://secunia.com/advisories/35215

Check your stack JSON