#20625 – CVE-2009-1889 Remote crash when receiving ICQWebMessage

Bug 20625 - CVE-2009-1889 Remote crash when receiving ICQWebMessage

Summary: CVE-2009-1889 Remote crash when receiving ICQWebMessage

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	libpurple (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 major
Assignee:	Nobody's working on this, feel free to take it
QA Contact:	qa-sisyphus

URL:	http://developer.pidgin.im/ticket/9483
Keywords:	security

Depends on:
Blocks:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Vladimir Lettiev 2009-06-29 09:43:29 MSD

При получении ICQWebMessage libpurple ошибочно определяет его как ICQSMS, что приводит к краху приложения.
Ошибка исправлена в новой версии 2.5.8

Alexey Shabalin 2009-07-12 00:23:56 MSD

fixed in 2.5.8