CVE Feed

    Dashboard / CVE / CVE-2010-0277

    CVE-2010-0277

    slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

    Published:Dec 27, 2009
    Last Modified:Apr 23, 2026
    EPS:Jan 9, 2010
    EPSS Score:0.08804
    CVSS Score:5

    Affected Products

    Vendor
    Adium
    Product
    Adium
    Vendor
    Pidgin
    Product
    Pidgin
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn
    http://developer.pidgin.im/wiki/ChangeLog
    http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html
    http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
    http://pidgin.im/news/security/?id=43
    http://secunia.com/advisories/38563
    http://secunia.com/advisories/38640
    http://secunia.com/advisories/38658
    http://secunia.com/advisories/38712
    http://secunia.com/advisories/38915
    http://secunia.com/advisories/41868
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:041
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:085
    http://www.openwall.com/lists/oss-security/2010/01/07/2
    http://www.securityfocus.com/bid/38294
    http://www.ubuntu.com/usn/USN-902-1
    http://www.vupen.com/english/advisories/2010/0413
    http://www.vupen.com/english/advisories/2010/1020
    http://www.vupen.com/english/advisories/2010/2693
    https://bugzilla.redhat.com/show_bug.cgi?id=554335
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421
    https://rhn.redhat.com/errata/RHSA-2010-0115.html
    http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn
    http://developer.pidgin.im/wiki/ChangeLog
    http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html
    http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
    http://pidgin.im/news/security/?id=43
    http://secunia.com/advisories/38563
    http://secunia.com/advisories/38640
    http://secunia.com/advisories/38658
    http://secunia.com/advisories/38712
    http://secunia.com/advisories/38915
    http://secunia.com/advisories/41868
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:041
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:085
    http://www.openwall.com/lists/oss-security/2010/01/07/2
    http://www.securityfocus.com/bid/38294
    http://www.ubuntu.com/usn/USN-902-1
    http://www.vupen.com/english/advisories/2010/0413
    http://www.vupen.com/english/advisories/2010/1020
    http://www.vupen.com/english/advisories/2010/2693
    https://bugzilla.redhat.com/show_bug.cgi?id=554335
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421
    https://rhn.redhat.com/errata/RHSA-2010-0115.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High