CVE-2009-1889

N/A Unknown
Published: July 01, 2009 Modified: April 23, 2026
View on NVD

Description

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://developer.pidgin.im/ticket/9483
Source: secalert@redhat.com
Patch Vendor Advisory
http://pidgin.im/pipermail/devel/2009-May/008227.html
Source: secalert@redhat.com
Patch
http://secunia.com/advisories/35693
Source: secalert@redhat.com
http://secunia.com/advisories/35697
Source: secalert@redhat.com
http://secunia.com/advisories/35706
Source: secalert@redhat.com
http://secunia.com/advisories/37071
Source: secalert@redhat.com
http://www.redhat.com/support/errata/RHSA-2009-1139.html
Source: secalert@redhat.com
http://www.securityfocus.com/bid/35530
Source: secalert@redhat.com
http://www.ubuntu.com/usn/USN-796-1
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2009/1749
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=508738
Source: secalert@redhat.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/51448
Source: secalert@redhat.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004
Source: secalert@redhat.com
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html
Source: secalert@redhat.com
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html
Source: secalert@redhat.com
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html
Source: secalert@redhat.com
http://developer.pidgin.im/ticket/9483
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://pidgin.im/pipermail/devel/2009-May/008227.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://secunia.com/advisories/35693
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/35697
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/35706
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/37071
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2009-1139.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/35530
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-796-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2009/1749
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=508738
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/51448
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html
Source: af854a3a-2127-422b-91ae-364da2661108

32 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.2%
87th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-399

Affected Vendors

pidgin

Related CVEs

CVE-2026-6786 8.1
CVE-2026-6785 8.1
CVE-2026-7041 3.7
CVE-2026-7039 7.8
CVE-2026-7038 3.3