SuSE 10 Security Update : pidgin (ZYPP Patch Number 7901)

Remote users could have crashed crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.1 Security Update : pidgin (SAT Patch Number 5586)

Remote users could have crashed pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2011-4601

CVE-2011-4601 affects Pidgin (libpurple) Oscar protocol plugin. The flaw is in family_feedbag.c where UTF-8 validation on message data is not performed, enabling a remote attacker to crash the application via crafted AIM/ICQ messages during buddy-list additions. Affected software version: Pidgin ...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CentOS Update for finch CESA-2009:1139 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2009:1536 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ICQ 7.5之前版本远程拒绝服务漏洞

ICQ是一款流行的即时通讯聊天工具。 ICQ在实现上存在远程拒绝服务漏洞，由于缺少输入验证、输出过滤及文件传输时的错误文件类型和文件名，攻击者可利用此漏洞使远程用户的ICQ客户端崩溃。 ICQ = 7..5 厂商补丁： ICQ --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icq.com/...

ICQ 7.5 Denial Of Service

+-----------------------------------------------------------------------------+ | noptrix.net - Public Security Advisory | +-----------------------------------------------------------------------------+ Date: ----- 07/28/2011 Vendor: ------- ICQ - http://www.icq.com/ Affected Software:...

ICQ Cross Site Scripting Vulnerability

This host is installed with ICQ and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodicqxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ ICQ Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod, http://www.secpod.com This...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

ICQ Cross Site Scripting Vulnerability

ICQ is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ICQ vulnerable to account theft using JavaScripts

ICQ vulnerable to account theft using JavaScripts In security advisories for ICQ https://noptrix.net/advisories/icqclixss.txtand the ICQ web site https://noptrix.net/advisories/icqwebxss.txt, security researcher Levent Kayan warns that both the ICQ instant messenger for Windows and the ICQ web si...

ICQ vulnerable to account theft using JavaScripts

ICQ vulnerable to account theft using JavaScripts In security advisories for ICQ and the ICQ web site , security researcher Levent Kayan warns that both the ICQ instant messenger for Windows and the ICQ web site contain vulnerabilities that potentially allow attackers to take control of a user's...

ICQ 7.5 Cross Site Scripting

+-----------------------------------------------------------------------------+ | noptrix.net - Public Security Advisory | +-----------------------------------------------------------------------------+ Date: ----- 07/26/2011 Vendor: ------- ICQ - http://www.icq.com/ Affected Software:...

ICQ Website Cross Site Scripting

+-----------------------------------------------------------------------------+ | noptrix.net - Public Security Advisory | +-----------------------------------------------------------------------------+ Date: ----- 07/26/2011 Vendor: ------- ICQ website - http://www.icq.com/ Affected Software:...

IW Messenger v3.5 - Persistent Input Validation Vulnerability

Document Title: =============== IW Messenger v3.5 - Persistent Input Validation Vulnerability Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 212 Product & Service Introduction: =============================== IWMessenger è un potente...

openSUSE Security Update : kdenetwork4 (openSUSE-SU-2010:1076-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2010-1000: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: CWE-22 The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary...