CVE-2014-3695

markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service application crash via a large length value in an emoticon response...

Code injection

markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service application crash via a large length value in an emoticon response...

CVE-2014-3695: Improper Restriction of Operations within the Bounds of a Memory Buffer

markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service application crash via a large length value in an emoticon response...

PT-2014-5456

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue allows remote servers to cause a denial of service, resulting in an application crash, by sending a large length value in an emoticon response. This is related to the markup.c file in the...

pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

Pidgin 'libpurple' 任意文件覆盖漏洞(CVE-2013-0271)

BUGTRAQ ID: 57952 CVECAN ID: CVE-2013-0271 Pidgin是一款多合一世界主流即时通讯软件集成工具。 Pidgin 2.10.7之前版本libpurple中MXit protocol插件存在安全漏洞，允许攻击者通过特制的mxit或mxit/imagestrips路径名创建或覆盖文件。 0 Pidgin 2.x 厂商补丁： Pidgin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.pidgin.im/news/security/...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : pidgin vulnerabilities (USN-1746-1)

Chris Wysopal discovered that Pidgin incorrectly handled file transfers in the MXit protocol handler. A remote attacker could use this issue to create or overwrite arbitrary files. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10. CVE-2013-0271 It was discovered that Pidgi...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

Code injection

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

Buffer overflow

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0272

CVE-2013-0272 affects Pidgin’s libpurple MXit protocol plugin; a buffer overflow in http.c allows remote servers to execute arbitrary code via a long HTTP header, with impact as described in the CVE. Affected product/version: Pidgin/libpurple prior to 2.10.7. Mitigation: upgrade to Pidgin 2.10.7 ...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

PT-2013-2205

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to a buffer overflow in the http.c file within the MXit protocol plugin in libpurple. This allows remote servers to execute arbitrary code via a long HTTP header. Recommendations...

PT-2013-2204

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue allows remote attackers to create or overwrite files via a crafted pathname, specifically in the MXit protocol plugin in libpurple. Recommendations For versions prior to 2.10.7, update to...