CVE-2008-2957

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.

Date published : 2008-07-01

http://www.securityfocus.com/bid/29985

http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm