RHEL 4 / 5 : pidgin (RHSA-2009:1536)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

AOL AIM sipXtapi.dll多个堆溢出漏洞

BUGTRAQ ID: 36849 AOL Instant Messenger是一款在线即时聊天工具。 AIM的SIP协议实现库（sipXtapi.dll）在解析RTCP发送方报告报文和RTP头时存在堆溢出漏洞。如果攻击者诱骗用户接受了视频聊天会话并向客户端发送了设置有畸形Extension Length值的RTP头或发送了恶意报文的话，就可以触发这些溢出，导致在客户端机器上执行任意指令。 AOL Instant Messenger 6.8 厂商补丁： AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CentOS 3 : pidgin (CESA-2009:1535)

An updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

Pidgin: Multiple vulnerabilities

Background Pidgin is a client for a variety of instant messaging protocols. Description Multiple vulnerabilities were found in Pidgin: Yuriy Kaminskiy reported that the OSCAR protocol implementation in Pidgin misinterprets the ICQWebMessage message type as the ICQSMS message type, triggering an...

Adium ICQ消息拒绝服务漏洞

CVE ID：CVE-2009-3615 Adium是一款Mac OS X下的多协议即时通信软件。 Adium处理部分oscar协议消息存在错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建特殊的ICQ消息可触发此漏洞。 Adium 1.x 厂商解决方案 用户可联系供应商升级到Adium 1.3.7版本： http://www.adium.im/?download=10.4...

Gaim AIM-ICQ Protocol Handling Buffer Overflow (CVE-2005-2103)

Gaim is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN, Yahoo!, and IRC. Gaim allows one user to log into multiple accounts on multiple IM networks simultaneously. The AIM/ICQ protocol is a TCP based instant message...

BigAnt IM Server Detection

This host is running BigAnt IM Server, a instant messaging solution for enterprise. OpenVAS Vulnerability Test $Id: BigAntdetect.nasl 6032 2017-04-26 09:02:50Z teissa $ BigAnt IM Server Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

BigAnt Server Detection (HTTP)

HTTP based detection of BigAnt Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100280";...

RedHat Security Advisory RHSA-2009:1453

The remote host is missing updates announced in advisory RHSA-2009:1453. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query IQ is an Extensible Messaging and Presence Protocol XMPP specific request-respons...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1453 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

Pidgin: NULL pointer dereference by processing a custom smiley (DoS)

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

Ding Xiang multi-user online customer service system vulnerabilities-vulnerability warning-the black bar safety net

Use's blog Ding Xiang multi-user online customer service system is an enterprise-level Web site real-time Exchange System, web site visitors simply click on the page the dialogue in the icon, without having to install or download any software, you can direct and web customer service staff for...

Pidgin < 2.6.1 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.6.1. Such versions are reportedly affected by one or more of following issues : - The Yahoo protocol plugin may crash when receiving an IM from any user that contains a URL. CVE-2009-3025 - The XMPP protocol plugin can be tricke...

Pidgin MSN 2.5.8 - Remote Code Execution

Pidgin MSN 2.5.8 - Remote Code Execution / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library...

Microsoft to Ship Mandatory Live Messenger Security Patch

Microsoft plans to force a mandatory Windows Live Messenger upgrade later this month to fix a security vulnerability that could lead to remote code execution attacks. The vulnerability, caused by an extra character in the Microsoft Active Template Library ATL, affects users of Windows Live...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's MSN protocol...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin...