CVE-2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2)…

published July 7, 2008

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04332 · 91.1th percentile
Published
2008-07-07T23:00Z
EPSS history
Timeline
  • 07 JUL 23:00Z
    Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2)…
    cvelistv5