Vulnerabilities > Adium > Adium > 1.3.1

DATE CVE VULNERABILITY TITLE RISK
2009-10-20 CVE-2009-3615 Resource Management Errors vulnerability in multiple products
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
network
low complexity
adium pidgin CWE-399
5.0
2009-08-21 CVE-2009-2694 Resource Management Errors vulnerability in multiple products
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.
network
low complexity
adium pidgin CWE-399
critical
10.0