Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-886-1)

It was discovered that Pidgin did not properly handle certain topic messages in the IRC protocol handler. If a user were tricked into connecting to a malicious IRC server, an attacker could cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 8.1...

Pidgin MSN 2.6.4 - File Download

Pidgin MSN 2.6.4 - File Download !/usr/bin/env python """ Pidgin MSN = 2.6.4 file download vulnerability 19 January 2010 Mathieu GASPARD [email protected] Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by Fabian Yamaguchi...

USN-886-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain topic messages in the IRC protocol handler. If a user were tricked into connecting to a malicious IRC server, an attacker could cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 8.1...

Pidgin MSN Custom Smileys File Disclosure Vulnerability (Windows)

This host has Pidgin installed and is prone to File Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbpidginmsnslpdirtravvulnwin.nasl 5373 2017-02-20 16:27:48Z teissa $ Pidgin MSN Custom Smileys File Disclosure Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

Pidgin < 2.6.6 MSN Protocol Plugin Denial Of Service Vulnerability - Linux

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin";...

Pidgin MSN Protocol Plugin DoS Vulnerability - Windows

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin MSN Custom Smileys File Disclosure Vulnerability - Windows

Pidgin is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin MSN Protocol Plugin Denial Of Service Vulnerability (Windows)

This host has Pidgin installed and is prone to Denial Of Service vulnerability OpenVAS Vulnerability Test $Id: gbpidginmsnslpdosvulnwin.nasl 5660 2017-03-21 11:29:28Z cfi $ Pidgin MSN Protocol Plugin Denial Of Service Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbon...

Pidgin < 2.6.5 MSN Custom Smileys File Disclosure Vulnerability - Linux

Pidgin is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

phpFormGenerator Remote Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Mandriva Update for pidgin MDVSA-2010:002 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:002 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

pidgin/libpurple: MSN custom smiley request directory traversal file disclosure

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

[ MDVSA-2010:002 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:002 http://www.mandriva.com/security/ Package : pidgin Date : January 11, 2010 Affected: 2010.0 Problem Description: A security vulnerability has been identified and fixed in pidgin: Directory traversal...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Pidgin MSN Custom Smileys Feature Emoticon Request Traversal Arbitrary File Disclosure

The version of Pidgin installed on the remote host is earlier than 2.6.5. Such versions have a directory traversal vulnerability when processing an MSN emoticon request. A remote attacker could exploit this to read arbitrary files. C Tenable Network Security, Inc. include"compat.inc"; if...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:001)

Security vulnerabilities has been identified and fixed in pidgin : The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrate...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

No description provided by source. Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn...

CVE-2010-0013

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

CVE-2010-0277

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a...