CVE-2013-0271

CVE-2013-0271 affects the MXit protocol plugin in libpurple/Pidgin. The vulnerability exists in Pidgin before version 2.10.7 and allows remote attackers to create or overwrite files via crafted MXIT pathname handling (1) mxit or (2) mxit/imagestrips). OpenVAS and vendor advisories reference fixes...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0272

CVE-2013-0272 affects Pidgin’s libpurple MXit protocol plugin; a buffer overflow in http.c allows remote servers to execute arbitrary code via a long HTTP header, with impact as described in the CVE. Affected product/version: Pidgin/libpurple prior to 2.10.7. Mitigation: upgrade to Pidgin 2.10.7 ...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0272: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

PT-2013-2205

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to a buffer overflow in the http.c file within the MXit protocol plugin in libpurple. This allows remote servers to execute arbitrary code via a long HTTP header. Recommendations...

PT-2013-2204

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue allows remote attackers to create or overwrite files via a crafted pathname, specifically in the MXit protocol plugin in libpurple. Recommendations For versions prior to 2.10.7, update to...

CVE-2013-0271: Undefined Security Weakness

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

libpurple -- multiple vulnerabilities

Pidgin reports: libpurple Fix a crash when receiving UPnP responses with abnormally long values. MXit Fix two bugs where a remote MXit user could possibly specify a local file path to be written to. Fix a bug where the MXit server or a man-in-the-middle could potentially send specially crafted da...

SuSE 11.1 Security Update : pidgin, finch and libpurple (SAT Patch Number 6534)

This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin. CVE-2012-3374 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Pidgin: Arbitrary code execution

Background Pidgin is a GTK Instant Messenger client for a variety of instant messaging protocols. libpurple is the core library for Pidgin. Description A stack-based buffer overflow vulnerability has been found in the MXit protocol plug-in for libpurple. Impact A remote attacker could possibly...

RedHat Update for pidgin RHSA-2012:1102-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

pidgin: Stack-based buffer overwrite in MXit protocol libPurple plug-in

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

libpurple / Pidgin code execution

Code execution in MXit protocol...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : pidgin vulnerabilities (USN-1500-1)

Evgeny Boger discovered that Pidgin incorrectly handled buddy list messages in the AIM and ICQ protocol handlers. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 10.04 LTS, 11.04 and 11.10...