Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0277
HistoryJan 09, 2010 - 6:30 p.m.

CVE-2010-0277

2010-01-0918:30:01
CWE-399
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.3 High

AI Score

Confidence

High

0.209 Low

EPSS

Percentile

96.4%

JSON

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

Affected configurations

NVD
Node
adiumadiumMatch1.3.8
OR
pidginpidginRange≀2.6.5
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
OR
pidginpidginMatch2.4.2
OR
pidginpidginMatch2.4.3
OR
pidginpidginMatch2.5.0
OR
pidginpidginMatch2.5.1
OR
pidginpidginMatch2.5.2
OR
pidginpidginMatch2.5.3
OR
pidginpidginMatch2.5.4
OR
pidginpidginMatch2.5.5
OR
pidginpidginMatch2.5.6
OR
pidginpidginMatch2.5.7
OR
pidginpidginMatch2.5.8
OR
pidginpidginMatch2.5.9
OR
pidginpidginMatch2.6.0
OR
pidginpidginMatch2.6.1
OR
pidginpidginMatch2.6.2
OR
pidginpidginMatch2.6.4

References

Related

cvelist 2
prion 2
ubuntucve 2
cve 2
debiancve 2
nessus 38
debian 4
fedora 9
openvas 63
centos 2
seebug 2
securityvulns 6
packetstorm 1
exploitpack 1
altlinux 2
veracode 2
redhat 2
oraclelinux 2
slackware 2
exploitdb 1
nvd 1
gentoo 1
freebsd 1
ubuntu 2
cvelist
cvelist
CVE-2010-0277
2010-01-09 18:00:00
CVE-2010-0013
2010-01-09 18:00:00
prion
prion
Memory corruption
2010-01-09 18:30:00
Directory traversal
2010-01-09 18:30:00
ubuntucve
ubuntucve
CVE-2010-0277
2010-01-09 00:00:00
CVE-2010-0013
2010-01-09 00:00:00
cve
cve
CVE-2010-0277
2010-01-09 18:30:01
CVE-2010-0013
2010-01-09 18:30:01
debiancve
debiancve
CVE-2010-0277
2010-01-09 18:30:01
CVE-2010-0013
2010-01-09 18:30:01
nessus
nessus
SuSE 10 Security Update : pidgin (ZYPP Patch Number 6856)
2011-01-27 00:00:00
SuSE 10 Security Update : pidgin (ZYPP Patch Number 6861)
2011-01-27 00:00:00
openSUSE Security Update : finch (finch-2032)
2010-03-04 00:00:00
debian
debian
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:17:54
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:27:39
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:06:11
fedora
fedora
[SECURITY] Fedora 12 Update: pidgin-2.6.6-1.fc12
2010-02-20 00:26:26
[SECURITY] Fedora 12 Update: pidgin-2.7.0-2.fc12
2010-05-24 19:48:53
[SECURITY] Fedora 12 Update: pidgin-2.6.5-1.fc12
2010-01-12 20:39:30
openvas
openvas
Fedora Update for pidgin FEDORA-2010-1383
2010-03-02 00:00:00
Fedora Update for pidgin FEDORA-2010-1383
2010-03-02 00:00:00
FreeBSD Ports: pidgin
2010-05-04 00:00:00
centos
centos
finch, libpurple, pidgin security update
2010-01-14 21:33:39
finch, libpurple, pidgin security update
2010-02-20 00:04:47
seebug
seebug
Pidgin MSN <= 2.6.4 File Download Vulnerability
2014-07-01 00:00:00
Pidgin倚δΈͺζ‹’η»ζœεŠ‘ζΌζ΄ž
2010-03-02 00:00:00
securityvulns
securityvulns
libpurple / Pidgin / Adium directory traversal
2010-01-13 00:00:00
HP Power Manager crossite request forgery
2011-02-14 00:00:00
[ MDVSA-2010:002 ] pidgin
2010-01-13 00:00:00
packetstorm
packetstorm
Pidgin MSN 2.6.4 File Download
2010-01-20 00:00:00
exploitpack
exploitpack
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1
2010-06-13 00:00:00
Security fix for the ALT Linux 5 package pidgin version 2.6.6-alt1
2010-02-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:40:21
Directory Traversal
2020-04-10 00:43:30
redhat
redhat
(RHSA-2010:0044) Important: pidgin security update
2010-01-14 00:00:00
(RHSA-2010:0115) Moderate: pidgin security update
2010-02-18 00:00:00
oraclelinux
oraclelinux
pidgin security update
2010-01-14 00:00:00
pidgin security update
2010-02-18 00:00:00
slackware
slackware
[slackware-security] pidgin
2010-01-25 05:20:22
[slackware-security] pidgin
2010-03-11 02:17:44
exploitdb
exploitdb
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
nvd
nvd
CVE-2010-0013
2010-01-09 18:30:01
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2012-06-21 00:00:00
freebsd
freebsd
pidgin -- multiple remote denial of service vulnerabilities
2010-02-18 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2010-02-22 00:00:00
Pidgin vulnerabilities
2010-01-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.3 High

AI Score

Confidence

High

0.209 Low

EPSS

Percentile

96.4%

JSON
Related for NVD:CVE-2010-0277
cvelist2prion2ubuntucve2cve2debiancve2nessus38debian4fedora9openvas63centos2seebug2securityvulns6packetstorm1exploitpack1altlinux2veracode2redhat2oraclelinux2slackware2exploitdb1nvd1gentoo1freebsd1ubuntu2