Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities - Windows

Pidgin is prone to denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2011-3184

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

Code injection

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

CVE-2011-3184

CVE-2011-3184 affects Pidgin (libpurple) MSN protocol plugin prior to version 2.10.0. The msn_httpconn_parse_data function fails to handle HTTP 100 responses, enabling a remote attacker to trigger incorrect memory access and cause a denial of service (application crash). The Ubuntu advisories and...

CVE-2011-3184

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

CVE-2011-3184

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

CVE-2011-3184

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

CVE-2011-3184: Undefined Security Weakness

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

Pidgin拒绝服务和安全绕过漏洞

Bugtraq ID: 49268 CVE ID：CVE-2011-2943 Pidgin是一款多协议即时通信软件。 Pidgin存在安全漏洞，允许恶意攻击者进行拒绝服务或任意代码执行攻击。 1当处理昵称中包含特殊字符的WHO应答时IRC协议插件存在错误，可被利用触发空指针引用。 2解析HTTP 100应答时MSN协议插件存在错误，可被利用使应用程序崩溃。 成功利用漏洞需要HTTP连接方法启用默认禁用并使用恶意服务器。 3Pidgin支持IM会话中使用URL处理器，windows平台下直接把URL提交给ShellExecute API，并以当前用户运行。当通过file://...

Pidgin < 2.10.0 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.10.0. As such, it is potentially affected by the following issues : - A code execution vulnerability caused by clicking on a file:// URI received in an IM that Pidgin will attempt to execute. This can result in the execution of...

CentOS Update for pidgin CESA-2009:1535 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for finch CESA-2010:0788 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2010:0788 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for pidgin CESA-2009:1059 centos3 i386

Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2009:1059 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for finch CESA-2009:1453 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2009:1218 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1218 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2009:1453 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1453 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2009:1218 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4811: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the 1 usermsn, 2 useremail, and 3 userphone parameters in a modifyDetails action...

Microsoft Windows Live Messenger 'dwmapi.dll' DLL装载任意代码执行漏洞

Bugtraq ID: 48055 Microsoft Windows Live Messenger是一款微软提供的流行的即时通信工具。 Microsoft Windows Live Messenger 'dwmapi.dll'以不安全方式装载DLL库，攻击者可以诱使用户在远程WebDAV或SMB共享上打开.plsk文件，可以登录用户安全上下文装载任意库 Microsoft Windows Live Messenger 14.0.8089 Microsoft Windows Live Messenger 14.0.8117.416 Microsoft Windows Live...

MSN Live Messenger 14.0 Plus! DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...