Unrated severityNVD Advisory· Published Oct 20, 2009· Updated Apr 23, 2026
CVE-2009-3615
CVE-2009-3615
Description
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
Affected products
46cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*range: <=1.3.6
- cpe:2.3:a:adium:adium:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:adium:adium:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*range: <=2.6.2
- cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
14- developer.pidgin.im/wiki/ChangeLognvdPatch
- secunia.com/advisories/37017nvdVendor Advisory
- secunia.com/advisories/37072nvdVendor Advisory
- www.pidgin.im/news/security/nvdVendor Advisory
- www.vupen.com/english/advisories/2009/2949nvdVendor Advisory
- www.vupen.com/english/advisories/2009/2951nvdVendor Advisory
- developer.pidgin.im/ticket/10481nvd
- developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/bid/36719nvd
- www.vupen.com/english/advisories/2010/1020nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53807nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414nvd
News mentions
0No linked articles in our index yet.