Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : pidgin vulnerabilities (USN-1746-1)

Chris Wysopal discovered that Pidgin incorrectly handled file transfers in the MXit protocol handler. A remote attacker could use this issue to create or overwrite arbitrary files. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10. CVE-2013-0271 It was discovered that Pidgi...

USN-1746-1: Pidgin vulnerabilities

Chris Wysopal discovered that Pidgin incorrectly handled file transfers in the MXit protocol handler. A remote attacker could use this issue to create or overwrite arbitrary files. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10. CVE-2013-0271 It was discovered that Pidgi...

Portable SDK for UPnP Devices libupnp Root Device Service Name Stack Buffer Overflow (CVE-2012-5960)

A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing service name URIs in the function called from the SSDP protocol parser. A remote attacker can exploit this vulnerability to execute...

Fedora Update for mediatomb FEDORA-2013-2377

Check for the Version of mediatomb OpenVAS Vulnerability Test Fedora Update for mediatomb FEDORA-2013-2377 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for mediatomb FEDORA-2013-2352

Check for the Version of mediatomb OpenVAS Vulnerability Test Fedora Update for mediatomb FEDORA-2013-2352 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 17 Update: mediatomb-0.12.1-23.fc17

MediaTomb is an open source GPL UPnP MediaServer with a nice web user interface, it allows you to stream your digital media through your home network and listen to/watch it on a variety of UPnP compatible devices. MediaTomb implements the UPnP MediaServer V 1.0 specification that can be found on...

[SECURITY] Fedora 18 Update: mediatomb-0.12.1-23.fc18

MediaTomb is an open source GPL UPnP MediaServer with a nice web user interface, it allows you to stream your digital media through your home network and listen to/watch it on a variety of UPnP compatible devices. MediaTomb implements the UPnP MediaServer V 1.0 specification that can be found on...

Portable SDK for UPnP Devices libupnp UUID Service Name Stack Buffer Overflow (CVE-2012-5959)

A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing UUID: service name URIs in the uniqueservicename function called from the SSDP protocol parser. Remote unauthenticated attackers can explo...

Pidgin Multiple Denial of Service Vulnerabilities (Feb 2013) - Windows

Pidgin is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin Multiple Denial of Service Vulnerabilities -Feb13 (Windows)

This host is installed with Pidgin and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultdosvulnfeb13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Pidgin Multiple Denial of Service Vulnerabilities -Feb13 Windows Authors: Arun Kallavi Copyright:...

Pidgin < 2.10.7 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.10.7. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the 'MXit' plugin and the saving of images that could allow arbitrary files to be overwritten. CVE-2013-0271 - A...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

Code injection

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

Pidgin (libpurple) upnp.c vulnerability CVE-2013-0274 arises from failure to terminate long strings in UPnP responses, affecting the Pidgin/libpurple component prior to version 2.10.7. This allows a remote attacker on the local network to trigger an application crash (DoS). The issue is specific ...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

PT-2013-2207

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to the improper termination of long strings in UPnP responses, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This ca...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...