Libpurple MSN short Packet Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Slackware Linux-current-x86_64-current
Pidgin Libpurple 2.7.8
Pidgin Libpurple 2.7.7
Pidgin Libpurple 2.7.6
Unaffected system:
Pidgin Libpurple 2.7.9
Description:
--------------------------------------------------------------------------------
Bugtraq id: 45581

Libpurple is a library that provides network layer connections for most services in Adium.

Libpurple has a remote denial-of-service vulnerability in implementation. Due to the lack of effective verification of network packets, remote attackers can exploit this vulnerability to crash the affected applications and reject legitimate users.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Slackware
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.slackware.org/support/