Approved changes feed: RSS · Atom

cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*

part: a version: 1.3.3 update: *

VendorAdium (f73555a0-b739-5425-83af-3bff4a5988d6)
ProductAdium (c82e68f1-da06-5990-8616-d94cfb23b402)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/adium/adium purl2cpe 2026-06-01 10:11:22.384849
pkg:sourceforge/adium purl2cpe 2026-06-01 10:11:22.384851

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3615 vulnerable 2026-06-03 14:29:52.202050 Details available
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
Published: 2009-10-20T17:00:00.000Z
Updated: 2024-08-07T06:31:10.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2694 vulnerable 2026-06-03 14:29:42.715124 Details available
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
Published: 2009-08-20T22:00:00.000Z
Updated: 2024-08-07T05:59:56.847Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.