Every CVESearch/Get API key

CVE-2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...

6.8 MediumFix available

CVE-2008-2927 is a medium vulnerability (CVSS 6.8) in Adium, published July 7, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.33%, the 91st percentile. Fixed in pidgin 2.4.3-1.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
4.33%EPSS, 91st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.4.3-1pidgin +43 more

Description

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Exploit likelihood

4.33%Down 7.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pidgin
Debian:12
before 2.4.3-1
2.4.3-1
pidgin
Debian:13
before 2.4.3-1
2.4.3-1
pidgin
Debian:14
before 2.4.3-1
2.4.3-1
gaim
Debian:4.0
before 1:2.0.0+beta5-10etch1, plus listed versions
1:2.0.0+beta5-10
1:2.0.0+beta5-10etch1
pidgin
Debian:5.0
From an advisory covering 4 CVEs
before 2.4.3-4lenny2, plus listed versions
2.4.3-42.4.3-4lenny12.4.3-4lenny1~bpo40+12.4.3-4lenny1~volatile02.4.3-4lenny2~bpo40+1
2.4.3-4lenny2
pidgin
Red Hat:enterprise_linux:3::as
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin-debuginfo
Red Hat:enterprise_linux:3::as
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin
Red Hat:enterprise_linux:3::desktop
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin
Red Hat:enterprise_linux:3::es
before 0:1.5.1-2.el3
0:1.5.1-2.el3
Show 34 moreShow less
Affected packages
PackageAffectedFixed
pidgin-debuginfo
Red Hat:enterprise_linux:3::es
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin
Red Hat:enterprise_linux:3::ws
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:1.5.1-2.el3
0:1.5.1-2.el3
pidgin
Red Hat:enterprise_linux:4::as
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin
Red Hat:enterprise_linux:4::desktop
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin
Red Hat:enterprise_linux:4::es
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin
Red Hat:enterprise_linux:4::ws
before 0:1.5.1-2.el4
0:1.5.1-2.el4
pidgin-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.5.1-2.el4
0:1.5.1-2.el4
finch-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin
Red Hat:enterprise_linux:5::client_workstation
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
finch
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-perl
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-tcl
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-debuginfo
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-perl
Red Hat:enterprise_linux:5::client
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
finch
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
finch-devel
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-devel
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-perl
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
libpurple-tcl
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-debuginfo
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-devel
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin-perl
Red Hat:rhel_productivity:5
before 0:2.3.1-2.el5_2
0:2.3.1-2.el5_2
pidgin
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
before 2.14.7-1.1
2.14.7-1.1

What each source reports

NVD Score used6.8

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
CVE-2008-2927
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
CVE-2008-2927
Updated
2026-11-02
EUVDEUVD-2008-2920No score

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
EUVD-2008-2920
Updated
2026-11-03
GitHub AdvisoriesGHSA-xgwj-qm2p-hcpcNo score

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
GHSA-xgwj-qm2p-hcpc
Updated
2026-11-02
OSVNo score

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
CVE-2008-2927
Updated
2026-11-02
OSVDEBIAN-CVE-2008-2927No score

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.

Record
DEBIAN-CVE-2008-2927
Updated
2026-11-02
OSVopenSUSE-SU-2024:11172-1No score

finch-2.14.7-1.1 on GA media

These are all security issues fixed in the finch-2.14.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11172-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 40 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open