SuSE 10 Security Update : pidgin (ZYPP Patch Number 7901)

Remote users could have crashed crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

[USN-1273-1] Pidgin vulnerabilities

========================================================================== Ubuntu Security Notice USN-1273-1 November 21, 2011 pidgin vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CentOS 4 / 5 : pidgin (CESA-2011:1371)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Fedora Update for pidgin FEDORA-2011-8917

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

pidgin security and bug fix update

2.7.9-3.el6 - Add patch for RH bug 684685 zero-out crypto keys before freeing. 2.7.9-2.el6 - Add patch for CVE-2011-1091 RH bug 683031. 2.7.9-1.el6 - Update to 2.7.9 RH bug 616917. - Remove patches now included upstream: pidgin-2.6.6-clientLogin-proxy-fix.patch...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.11-alt0.M50P.1

March 31, 2011 Gleb Fotengauer-Malinovskiy 2.7.11-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-1091...

Security fix for the ALT Linux 5 package pidgin version 2.7.11-alt0.M50P.1

March 30, 2011 Gleb Fotengauer-Malinovskiy 2.7.11-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-1091...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : firefox, firefox-{3.0,3.5}, xulrunner-1.9.2 vulnerabilities (USN-1091-1)

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could use these to perform a man-in-the-middle attack. These were placed on the certificate blacklist to prevent their misuse. Note that Tenable Network Security has extracted the preceding description...

Mandriva Update for pidgin MDVSA-2011:050 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2011:050 pidgin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for pidgin FEDORA-2011-3113

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pidgin FEDORA-2011-3132

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : pidgin (MDVSA-2011:050)

Multiple vulnerabilities has been identified and fixed in pidgin : It was discovered that libpurple versions prior to 2.7.10 do not properly clear certain data structures used in libpurple/cipher.c prior to freeing. An attacker could potentially extract partial information from memory regions fre...

Fedora 14 : pidgin-2.7.11-1.fc14 (2011-3113)

New release 2.7.11 Full Upstream ChangeLog : http://developer.pidgin.im/wiki/ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

CVE-2011-1091

CVE-2011-1091 affects the Yahoo! protocol plugin (libpurple) used by Pidgin, where libymsg.c is vulnerable to NULL pointer dereference when processing malformed YMSG notifications or YMSG SMS messages, potentially causing denial of service. The issue is tied to the Yahoo! Messenger protocol plug-...

Security fix for the ALT Linux 5 package pidgin version 2.7.11-alt1

March 14, 2011 Alexey Shabalin 2.7.11-alt1 - 2.7.11 - CVE-2011-1091: remote denial of service in Yahoo protocol plugin...

CVE-2010-1091

CVE-2010-1091 affects phpMySite’s contact.php, enabling multiple XSS via the name, city, email, state, and message parameters. The affected component is the contact form handling in phpMySite. Root cause: unescaped user-supplied input in these fields. Impact: remote attackers can inject arbitrary...

CVE-2010-1091

Multiple cross-site scripting XSS vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 city, 3 email, 4 state, and 5 message parameters...

CVE-2009-1091

Cross-site scripting XSS vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter...

CVE-2009-1091

CVE-2009-1091 : Cross-site scripting (XSS) vulnerability in upload.php of Rapidleech rev.36 and earlier. Remote attackers can inject arbitrary web script or HTML via the uploaded parameter. Affected: Rapidleech upload.php (rev.36 and earlier). Impact: partial integrity; no confidentiality or avai...

CVE-2008-1091

Microsoft Word Object Parsing Vulnerability (CVE-2008-1091) is a remote code execution flaw in parsing malformed Rich Text Format (.rtf) files. The underlying issue is a memory calculation error that can trigger a heap-based buffer overflow when Word processes a malformed string, enabling arbitra...