509 matches found
Mandriva Update for pidgin MDVSA-2010:208 (pidgin)
Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:208 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2010:0788 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt1
Oct. 21, 2010 Slava Semushin 2.7.4-alt1 - Updated to 2.7.4 + CVE-2010-3711: eight DoS conditions in libpurple...
libpurple library / Pidgin DoS
NULL pointer dereference on OSCAR protocol messages parsing ICQ, AIM...
DEBIAN-CVE-2010-2528
The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...
CVE-2010-2528
The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:002)
A security vulnerability has been identified and fixed in pidgin : Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka...
CVE-2010-2528
The CVE-2010-2528 issue affects Pidgin (libpurple) using the Oscar protocol plugin. Vulnerable component: clientautoresp function in family_icbm.c, prior to Pidgin 2.7.2. Root cause: X-Status messages lacking the end tag for a desc or title element are not handled correctly, enabling a remote aut...
Fedora 13 : pidgin-sipe-1.9.1-1.fc13 (2010-4859)
Contributed File transfer functionality. File encryption is supported. Jakub Adam, Tomas Hrabik NTLMv2 and NTLMv2 Session Security support pier11 Implemented SIP Authentication Extensions protocol version 4 and 3 pier11 Adoption for commercial UNIX - HP/UX, Irix, Solaris - big endian fixes and...
Fedora 11 : pidgin-sipe-1.9.1-1.fc11 (2010-4830)
Contributed File transfer functionality. File encryption is supported. Jakub Adam, Tomas Hrabik NTLMv2 and NTLMv2 Session Security support pier11 Implemented SIP Authentication Extensions protocol version 4 and 3 pier11 Adoption for commercial UNIX - HP/UX, Irix, Solaris - big endian fixes and...
Fedora 12 : pidgin-sipe-1.9.1-1.fc12 (2010-4848)
Contributed File transfer functionality. File encryption is supported. Jakub Adam, Tomas Hrabik NTLMv2 and NTLMv2 Session Security support pier11 Implemented SIP Authentication Extensions protocol version 4 and 3 pier11 Adoption for commercial UNIX - HP/UX, Irix, Solaris - big endian fixes and...
libpurple / Pidgin DoS
Crash on MSN emoticon messages parsing...
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:097)
A security vulnerability has been identified and fixed in pidgin : The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash via a custom emoticon in a malformed SLP message...
CVE-2010-1624
The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...
DEBIAN-CVE-2010-1624
The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...
CVE-2010-1624
The CVE-2010-1624 issue affects Pidgin (libpurple) MSN protocol plugin, specifically the msn_emoticon_msg function in slp.c. It allows remote authenticated users to trigger a denial of service via a specially crafted SLP message containing a malformed emoticon, causing a NULL pointer dereference ...
CVE-2010-1624
The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...
CVE-2010-1624
The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...
FreeBSD Ports: pidgin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: pidgin
The remote host is missing an update to the system as announced in the referenced advisory. VID a2c4d3d5-4c7b-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID a2c4d3d5-4c7b-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...