Libpurple buffer overflow vulnerability

Overview The Libpurple instant messenger library contains a vulnerability that may allow an attacker to execute arbitrary code. Description Libpurple is an instant messenger IM library that is used by various programs to connect to multiple networks. Libpurple contains a buffer overflow...

Pidgin < 2.5.9 'msn_slplink_process_msg()' Memory Corruption

The version of Pidgin installed on the remote host is earlier than 2.5.9. Such versions are reportedly affected by a vulnerability in 'msnslplinkprocessmsg'. Maliciously crafted MSN SLP messages can result in memory corruption. A remote attacker could use this to crash the client, or execute...

Critical: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...

ICQ 6.5 HTML Injection

ShineShadow Security Report 14082009-08 TITLE ICQ 6.5 HTML-injection vulnerability BACKGROUND With more than 700 million instant messages sent and received every day, ICQ has been known to the online community as a messaging service. Today, a little more than a decade after the first ICQ instant...

openSUSE Security Update : finch (finch-1088)

Several bugfixes were done for the Instant Messenger Pidgin : - Malformed responses to file transfers could cause a buffer overflow in pidgin CVE-2009-1373 and specially crafted packets could crash it CVE-2009-1375. - The fix against integer overflows in the msn protocol handling was incomplete...

openSUSE Security Update : psi (psi-574)

Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-574. The text description of this...

openSUSE Security Update : psi (psi-574)

Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-574. The text description of this...

Code injection

The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

CVE-2009-2435

The CVE-2009-2435 entry corresponds to IBM Lotus Sametime/Instant Messaging and Web Conferencing 6.5.1. The vulnerability arises from login error handling that produces different time delays depending on whether the target username exists, enabling remote attackers to enumerate valid usernames. I...

IBM Lotus Sametime Instant Messaging and Web Conferencing

Different reply timeings in case for invalid username and password...

Solaris Update for Gnome Multi-protocol instant messaging client 119549-13

Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Solaris Update for Gnome Multi-protocol instant messaging client 119549-13

Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

[ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200905-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

RedHat Security Advisory RHSA-2009:1059

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1059. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transfers when...

Debian Security Advisory DSA 1805-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 1805-1. OpenVAS Vulnerability Test $Id: deb18051.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1805-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1805-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 22, 2009 http://www.debian.org/security/faq -...

RedHat Security Advisory RHSA-2009:1059

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1059. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transfers when...

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...

RHEL 4 / 5 : pidgin (RHSA-2009:1060)

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1805-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 22, 2009 http://www.debian.org/security/faq -...