Pidgin: NULL pointer dereference by processing a custom smiley (DoS)

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

Pidgin < 2.6.1 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.6.1. Such versions are reportedly affected by one or more of following issues : - The Yahoo protocol plugin may crash when receiving an IM from any user that contains a URL. CVE-2009-3025 - The XMPP protocol plugin can be tricke...

Microsoft to Ship Mandatory Live Messenger Security Patch

Microsoft plans to force a mandatory Windows Live Messenger upgrade later this month to fix a security vulnerability that could lead to remote code execution attacks. The vulnerability, caused by an extra character in the Microsoft Active Template Library ATL, affects users of Windows Live...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's MSN protocol...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin...

Pidgin < 2.5.9 'msn_slplink_process_msg()' Memory Corruption

The version of Pidgin installed on the remote host is earlier than 2.5.9. Such versions are reportedly affected by a vulnerability in 'msnslplinkprocessmsg'. Maliciously crafted MSN SLP messages can result in memory corruption. A remote attacker could use this to crash the client, or execute...

Critical: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

ICQ 6.5 HTML Injection

ShineShadow Security Report 14082009-08 TITLE ICQ 6.5 HTML-injection vulnerability BACKGROUND With more than 700 million instant messages sent and received every day, ICQ has been known to the online community as a messaging service. Today, a little more than a decade after the first ICQ instant...

openSUSE Security Update : psi (psi-574)

Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-574. The text description of this...

openSUSE Security Update : psi (psi-574)

Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-574. The text description of this...

Code injection

The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

CVE-2009-2435

The CVE-2009-2435 entry corresponds to IBM Lotus Sametime/Instant Messaging and Web Conferencing 6.5.1. The vulnerability arises from login error handling that produces different time delays depending on whether the target username exists, enabling remote attackers to enumerate valid usernames. I...

CVE-2009-2435: Undefined Security Weakness

The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

IBM Lotus Sametime Instant Messaging and Web Conferencing

Different reply timeings in case for invalid username and password...

Solaris Update for Gnome Multi-protocol instant messaging client 119549-13

Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Solaris Update for Gnome Multi-protocol instant messaging client 119549-13

Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

[ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200905-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1805-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 22, 2009 http://www.debian.org/security/faq -...

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...

RedHat Security Advisory RHSA-2009:1059

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1059. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transfers when...