www: ffaf34c8: Add the security problem to the ever gro...

[markdoliner at pidgin.im]

-----------------------------------------------------------------
Revision: ffaf34c8de2493364f4a4ffd9c5120d6c86d70ad
Ancestor: 3d7c82152cceb5b67be983b992411375b1409c34
Author: markdoliner at pidgin.im
Date: 2009-10-16T10:28:56
Branch: im.pidgin.www
URL: http://d.pidgin.im/viewmtn/revision/info/ffaf34c8de2493364f4a4ffd9c5120d6c86d70ad

Modified files:
        htdocs/news/security/index.php

ChangeLog: 

Add the security problem to the ever growing list

-------------- next part --------------
============================================================
--- htdocs/news/security/index.php	534918972da28c0b2b5d821f4d97c9ea0a0a6d62
+++ htdocs/news/security/index.php	6ae096d3d3a728b22aa1aa0e20c52efdb8451542
@@ -432,6 +432,17 @@ $vulnerabilities = array(
 		"fixrevisions" => "ad2c6ee53ec9122b25aeb1f918db53be69bdeac3",
 		"fixedversion" => "2.6.2",
 		"discoveredby" => "Cristofaro Mune"
+	array(
+		"title"        => "ICQ and maybe AIM remote crash",
+		"date"         => "2009-10-16",
+		"cve"          => "",
+		"summary"      => "A remote user can cause libpurple-based clients to crash",
+		"description"  => "A specially crafted message can trigger an incorrect memory access in the oscar protocol plugin which can lead to a crash.  This happens when the SIM IM client attempts to send contacts to a libpurple user.",
+		"fix"          => "Check for the correct number of fields before attempting to dereference memory.",
+		"fixrevisions" => "781682333aea0c801d280c3507ee25552a60bfc0",
+		"fixedversion" => "2.6.3",
+		"discoveredby" => "nightwing666 in <a href=\"http://developer.pidgin.im/ticket/10481\">ticket #10481</a>"
+	),
 	)
 );
 /*	Template for the unfortunate future