• info
• discussion
• exploit
• solution
• references

Pidgin 'msn_slplink_process_msg()' Multiple Integer Overflow Vulnerabilities

Pidgin is prone to multiple integer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow attackers to execute arbitrary code with the privileges of a user running the software. Failed exploit attempts likely cause denial-of-service conditions.

Versions prior to Pidgin 2.4.3 are vulnerable.