DEBIAN-CVE-2012-2318

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

Design/Logic Flaw

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

CVE-2012-2214

CVE-2012-2214 concerns proxy.c in libpurple (Pidgin) prior to 2.10.4, where canceled SOCKS5 connection attempts could be abused by an authenticated user to trigger a denial-of-service (application crash) via a sequence of XMPP file-transfer requests. Affected software is Pidgin with libpurple; th...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

SuSE 10 Security Update : finch, libpurple, and pidgin (ZYPP Patch Number 8131)

Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...

FreeBSD Ports: libpurple

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libpurple

The remote host is missing an update to the system as announced in the referenced advisory. VID 64f8b72d-9c4e-11e1-9c94-000bcdf0a03b OpenVAS Vulnerability Test $ Description: Auto generated from VID 64f8b72d-9c4e-11e1-9c94-000bcdf0a03b Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Pidgin < 2.10.4 Multiple DoS Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.10.4 and is, therefore, potentially affected by the following issues : - An error exists in the file 'libpurple/proxy.c' that can allow certain file transfer requests to an invalid pointer to be dereferenced, leading to...

FreeBSD : libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing a series of specially crafted file transfer requests (64f8b72d-9c4e-11e1-9c94-000bcdf0a03b)

Pidgin reports : A series of specially crafted file transfer requests can cause clients to reference invalid memory. The user must have accepted one of the file transfer requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests

Pidgin reports: A series of specially crafted file transfer requests can cause clients to reference invalid memory. The user must have accepted one of the file transfer requests...

FreeBSD Ports: libpurple

The remote host is missing an update to the system as announced in the referenced advisory. VID 7289214f-7c55-11e1-ab3b-000bcdf0a03b OpenVAS Vulnerability Test $ Description: Auto generated from VID 7289214f-7c55-11e1-ab3b-000bcdf0a03b Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: libpurple

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 17 : pidgin-2.10.2-1.fc17 (2012-4650)

version 2.10.2 03/14/2012 View all closed tickets for this release. General: Fix compilation when using binutils 2.22 and new GDK pixbuf. 14799 Fix compilation of the MXit protocol plugin with GLib 2.31. 14773 Pidgin: Add support for the GNOME3 Network dialog. 13882 Fix rare crash. 14392 Add...

FreeBSD : libpurple -- Remote DoS via an MSN OIM message that lacks UTF-8 encoding (7289214f-7c55-11e1-ab3b-000bcdf0a03b)

US-CERT reports : The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

pidgin / libpurple security vulnerabilities

DoS via XMPP and MSN messages, local information leakage...

CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

DEBIAN-CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

CVE-2012-1178

CVE-2012-1178 affects Pidgin/libpurple MSN protocol plugin (oim.c: msn_oim_report_to_user). A remote server can crash the client by sending an OIM message that is not UTF-8 encoded, leading to a denial of service. Affected: Pidgin up to version prior to 2.10.2 (PIDGIN/ libpurple with MSN plugin)....