oval:org.mitre.oval:def:22782

Definition Id: oval:org.mitre.oval:def:22782

Oval ID:	oval:org.mitre.oval:def:22782
Title:	ELSA-2009:1218: pidgin security update (Critical)
Description:	The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1218-01 CVE-2009-2694	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	pidgin
Definition Synopsis:
Oracle Linux 5.x rpm test libpurple is earlier than 0:2.5.9-1.el5 AND finch is earlier than 0:2.5.9-1.el5 AND libpurple-perl is earlier than 0:2.5.9-1.el5 AND pidgin is earlier than 0:2.5.9-1.el5 AND pidgin-perl is earlier than 0:2.5.9-1.el5 AND finch-devel is earlier than 0:2.5.9-1.el5 AND pidgin-devel is earlier than 0:2.5.9-1.el5 AND libpurple-devel is earlier than 0:2.5.9-1.el5 AND libpurple-tcl is earlier than 0:2.5.9-1.el5

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:22782