CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

Null pointer dereference

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

CVE-2010-4528

The CVE-2010-4528 issue affects the MSN protocol plugin in libpurple used by Pidgin, specifically in directconn.c for Pidgin versions 2.7.6–2.7.8. The flaw allows remote authenticated users to trigger a denial-of-service via a short p2pv2 DirectConnect (direct connection) packet, resulting in a N...

CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

RHEL 6 : pidgin (RHSA-2010:0890)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0890 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple NULL...

(libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Pidgin Libpurple 'purple_base64_decode()' Denial of Service Vulnerabilities (Windows)

This host has Pidgin installed and is prone to Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginlibpurplemultdosvulnwin.nasl 5373 2017-02-20 16:27:48Z teissa $ Pidgin Libpurple 'purplebase64decode' Denial of Service Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

Pidgin Libpurple 'purple_base64_decode()' DoS Vulnerabilities - Windows

Pidgin is prone to denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin purple_base64_decode()函数空指针引用拒绝服务漏洞

BUGTRAQ ID: 44283 CVE ID: CVE-2010-3711 Pidgin是支持多种协议的即时通讯客户端。 Pidgin所使用的libpurple库没有充分地验证Yahoo!、MSN、MySpaceIM和XMPP协议插件及NTLM认证支持中所使用的 purplebase64decode函数的返回值，远程攻击者可以通过base64编码的消息触发空指针引用，导致拒绝服务的情况。 Pidgin 2.7.4 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2010:0788-01）以及相应补丁:...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Null pointer dereference

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

CVE-2010-3711 affects libpurple in Pidgin up to version 2.7.3; the bug arises from not properly validating the return value of purple_base64_decode, allowing remote authenticated users to trigger a NULL pointer dereference and crash via crafted messages. Affected components include MSN, MySpaceIM...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

libpurple library / Pidgin DoS

Crash on base64 decoding in different protocols...

[ MDVSA-2010:208 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:208 http://www.mandriva.com/security/ Package : pidgin Date : October 21, 2010 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A security vulnerability has been identified and...

Mandriva Update for pidgin MDVSA-2010:208 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:208 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...