Debian DSA-1805-1 : pidgin - several vulnerabilities

Several vulnerabilities have been discovered in Pidgin, a graphical multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1373 A buffer overflow in the Jabber file transfer code may lead to denial of service or the...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1060 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

Important: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

Important: Red Hat Security Advisory: pidgin security update

An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

PT-2009-1055 · Pidgin +2 · Pidgin +2

Name of the Vulnerable Software and Affected Versions: Pidgin versions prior to 2.5.6 libpurple versions prior to 2.5.6 Description: The issue is caused by multiple integer overflows in the MSN protocol handler, allowing remote attackers to execute arbitrary code via a malformed SLP message with ...

DSA-1805-1 pidgin - several vulnerabilities

Bulletin has no description...

Ubuntu 7.10 / 8.04 LTS : pidgin vulnerabilities (USN-675-1)

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...

Ubuntu: Security Advisory (USN-675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for gaim vulnerability USN-675-2

Ubuntu Update for Linux kernel vulnerabilities USN-675-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6752.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gaim vulnerability USN-675-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

TMSNC: Execution of arbitrary code

Background TMSNC is a Textbased client for the MSN instant messaging protocol. Description Nico Golde reported a stack-based buffer overflow when processing a MSN packet with a UBX command containing a large UBX payload length field. Impact A remote attacker could send a specially crafted message...

RedHat Update for pidgin RHSA-2008:0584-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2008:0584-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS Update for pidgin CESA-2008:0584 centos3 x86_64

Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2008:0584 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

GLSA-200901-13 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200901-13 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin and the libpurple library: A participant to the TippingPoint ZDI reported multiple integer overflows in the msnslplinkprocessmsg...

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. It is based on the libpurple instant messaging library. Description Multiple vulnerabilities have been discovered in Pidgin and the libpurple library: A participant to the TippingPoint ZDI...

Design/Logic Flaw

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 MSNP15 is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the 1 IPv4InternalAddrsAndPorts, 2 IPv4Internal-Addrs, and 3 IPv4Internal-Port header...

CVE-2008-5828

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 MSNP15 is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the 1 IPv4InternalAddrsAndPorts, 2 IPv4Internal-Addrs, and 3 IPv4Internal-Port header...

USN-675-2: Gaim vulnerability

It was discovered that Gaim did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927...

USN-675-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...