509 matches found
SuSE 11.1 Security Update : finch, libpurple and pidgin (SAT Patch Number 6294)
Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...
SuSE 11.1 Security Update : finch, libpurple and pidgin (SAT Patch Number 6294)
Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...
Mandriva Linux Security Advisory : pidgin (MDVSA-2012:029)
Multiple vulnerabilities has been discovered and corrected in pidgin : The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...
Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability (Windows)
This host is installed with Pidgin and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbpidginlibpurplecipherapiinfodiscvulnwin.nasl 5977 2017-04-19 09:02:22Z teissa $ Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability Windows Authors: Madhuri D...
Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability - Windows
Pidgin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2011-4922
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...
CVE-2011-4922
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...
Design/Logic Flaw
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...
CVE-2011-4922
Pidgin (libpurple) Cipher API vulnerability CVE-2011-4922 affects cipher.c: it may retain encryption-key data in process memory, enabling local users to read sensitive information from memory/core dumps. This affects Pidgin builds prior to 2.7.10. Impact is information disclosure via memory conte...
CentOS Update for finch CESA-2011:1371 centos4 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for finch CESA-2012:1102 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2012:1102 Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...
pidgin: Stack-based buffer overwrite in MXit protocol libPurple plug-in
Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...
SuSE 10 Security Update : pidgin, finch and libpurple (ZYPP Patch Number 8220)
This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin. CVE-2012-3374 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descripti...
libpurple / Pidgin code execution
Code execution in MXit protocol...
Pidgin 'mxit_show_message()'基于栈的缓冲区溢出漏洞
Bugtraq ID:54322 CVE ID:CVE-2012-3374 Pidgin是一款多协议即时通信软件 如果进入的消息包含内联图像，"mxitshowmessage"函数libpurple/protocols/mxit/markup.c解析时存在一个边界错误，允许攻击者构建特制的RX消息触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码 0 Pidgin 2.x 厂商解决方案 Pidgin 2.10.5已经修复此漏洞，建议用户下载使用： http://www.pidgin.im/news/security/index.php?id=64...
DEBIAN-CVE-2012-3374
Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...
Buffer overflow
Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...
CVE-2012-3374
CVE-2012-3374 affects the Pidgin/libpurple MXit protocol plugin, where a stack-based buffer overflow in markup.c could be triggered by a crafted inline image in a message to allow remote code execution. Public advisories/ Nessus entries link this to Pidgin prior to 2.10.5, with patches released t...
