Home > Vulnerability Database > CVE-2009-1373

Mend.io Vulnerability Database

CVE-2009-1373

Good to know:

Date: May 26, 2009

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.

Language: C

Severity Score

7.5

Related Resources (29)

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:140

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-1373

Url: http://secunia.com/advisories/35329

Url: http://www.vupen.com/english/advisories/2009/1396

Url: http://www.redhat.com/support/errata/RHSA-2009-1060.html

Url: http://debian.org/security/2009/dsa-1805

Url: https://bugzilla.redhat.com/show_bug.cgi?id=500488

Url: http://secunia.com/advisories/35188

Url: http://secunia.com/advisories/35202

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-1373

Url: http://www.ubuntu.com/usn/USN-781-2

Url: http://www.ubuntu.com/usn/USN-781-1

Url: https://access.redhat.com/security/cve/CVE-2009-1373

Url: http://secunia.com/advisories/35194

Url: http://secunia.com/advisories/35294

Url: http://www.redhat.com/support/errata/RHSA-2009-1059.html

Url: http://secunia.com/advisories/35215

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:173

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722

Url: http://secunia.com/advisories/35330

Url: http://www.pidgin.im/news/security/?id=29

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005

Url: http://www.securityfocus.com/bid/35067

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/50682

Url: http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml

Url: https://www.mend.io/vulnerability-database/CVE-2009-1373

Severity Score

7.5

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

CVSS v3.1

Base Score:	7.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	7.1
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	SINGLE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-1373

Good to know:

Date: May 26, 2009

Language: C

Severity Score

Related Resources (29)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?