Lucene search
+L

86 matches found

Prion
Prion
added 2014/02/06 4:10 p.m.11 views

Code injection

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...

5CVSS6.8AI score0.02747EPSS
SaveExploits0References12Affected Software1
Cvelist
Cvelist
added 2014/02/06 3:0 p.m.18 views

CVE-2014-0020

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...

6.1AI score0.02747EPSS
SaveExploits0References12
CVE
CVE
added 2014/02/06 3:0 p.m.88 views

CVE-2014-0020

The CVE-2014-0020 entry applies to Pidgin with libpurple’s IRC protocol plugin (pre-2.10.8). The issue is that the IRC plugin does not validate argument counts, allowing remote IRC servers to crash the application (DoS) via a crafted message. Public advisories across distributions indicate this h...

5CVSS6.2AI score0.02747EPSS
SaveExploits0References12Affected Software1
RedHat Linux
RedHat Linux
added 2014/02/05 5:42 p.m.6 views

pidgin: DoS in IRC protocol plugin due to arguement parsing

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...

5CVSS5.8AI score0.02747EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2014/02/05 12:0 a.m.20 views

CVE-2014-0020

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...

5CVSS5.9AI score0.02747EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/09/12 12:0 a.m.43 views

Mandriva Update for pidgin MDVSA-2011:132 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2011:132 pidgin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

4.3CVSS0.2AI score0.03858EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2011/09/12 12:0 a.m.47 views

Mandriva Update for pidgin MDVSA-2011:132 (pidgin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS7.4AI score0.03858EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2011/09/09 12:0 a.m.34 views

Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities (Windows)

This host is installed with Pidgin and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginlibpurpleprotocolpluginsdosvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities Windows Authors: Rachana...

9.3CVSS0.4AI score0.04794EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2011/09/09 12:0 a.m.27 views

Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities - Windows

Pidgin is prone to denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.3AI score0.04794EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2011/08/29 5:55 p.m.23 views

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

4.3CVSS5.9AI score0.03596EPSS
SaveExploits1References3
Prion
Prion
added 2011/08/29 5:55 p.m.21 views

Null pointer dereference

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

4.3CVSS6.9AI score0.03596EPSS
SaveExploits1References12Affected Software2
NVD
NVD
added 2011/08/29 5:55 p.m.30 views

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

4.3CVSS6.3AI score0.03596EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2011/08/29 5:0 p.m.36 views

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

6.2AI score0.03596EPSS
SaveExploits1References12
Debian CVE
Debian CVE
added 2011/08/29 5:0 p.m.43 views

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

4.3CVSS6AI score0.03596EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2011/08/22 12:0 a.m.38 views

Pidgin < 2.10.0 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.10.0. As such, it is potentially affected by the following issues : - A code execution vulnerability caused by clicking on a file:// URI received in an IM that Pidgin will attempt to execute. This can result in the execution of...

9.3CVSS6.1AI score0.04794EPSS
SaveExploits1References8
ThreatPost
ThreatPost
added 2010/11/16 4:21 p.m.9 views

Report: IRC Botnets Dying…But Not Dead

Once the most common form of malicious computer network, botnets that use the IRC Internet Relay Chat protocol are going the way of the Brontosaurus, according to a report from Internet security monitoring firm Team Cymru. Under fire from better monitoring of IRC command and control C&C traffic a...

0.3AI score
SaveExploits0References7
NVD
NVD
added 2010/08/02 8:40 p.m.12 views

CVE-2010-2785

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

6.5CVSS6.8AI score0.07574EPSS
SaveExploits1References11
OSV
OSV
added 2010/08/02 8:40 p.m.3 views

DEBIAN-CVE-2010-2785

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

6.5CVSS7.3AI score0.07574EPSS
SaveExploits1References1
OSV
OSV
added 2010/08/02 8:40 p.m.9 views

CVE-2010-2785

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

6.8AI score
SaveExploits0References11
Prion
Prion
added 2010/08/02 8:40 p.m.16 views

Design/Logic Flaw

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

6.5CVSS7.1AI score0.07574EPSS
SaveExploits1References11Affected Software1
Rows per page
Query Builder