CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

CVE-2009-1376

The CVE-2009-1376 issue is a Libpurple/Pidgin memory corruption vulnerability: multiple integer overflows in msn_slplink_process_msg() (MSN protocol) and related slplink code on 32-bit platforms allow remote attackers to cause buffer overflows and potentially execute arbitrary code. The flaw stem...

CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

GLSA-200905-07 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200905-07 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the 'XMPP SOCKS5 bytestream server' when initiating an outgoing file transfer CVE-2009-1373...

Pidgin memory corruption

Memory corruption on malcrafted filename in MSN protocol. Buffer overflow on Jabber file transfer. Buffer overflow in QQ protocol...

RedHat Security Advisory RHSA-2009:1059

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1059. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transfers when...

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...

Debian DSA-1805-1 : pidgin - several vulnerabilities

Several vulnerabilities have been discovered in Pidgin, a graphical multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1373 A buffer overflow in the Jabber file transfer code may lead to denial of service or the...

RHEL 3 : pidgin (RHSA-2009:1059)

An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

CentOS 3 : pidgin (CESA-2009:1059)

An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1060 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

pidgin security update

CentOS Errata and Security Advisory CESA-2009:1059 An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program...

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

Important: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

Important: Red Hat Security Advisory: pidgin security update

An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

PT-2009-1055 · Pidgin +2 · Pidgin +2

Name of the Vulnerable Software and Affected Versions: Pidgin versions prior to 2.5.6 libpurple versions prior to 2.5.6 Description: The issue is caused by multiple integer overflows in the MSN protocol handler, allowing remote attackers to execute arbitrary code via a malformed SLP message with ...

DSA-1805-1 pidgin - several vulnerabilities

Bulletin has no description...

Ubuntu 7.10 / 8.04 LTS : pidgin vulnerabilities (USN-675-1)

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...