(libpurple): Invalid UTF-8 string handling in OSCAR messages

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

Security fix for the ALT Linux 6 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Security fix for the ALT Linux 5 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Proxy List Script Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Pidgin < 2.5.6 Multiple Buffer Overflows

The remote host is running Pidgin earlier than 2.5.6. Such versions are reportedly affected by multiple buffer overflow vulnerabilities : - A buffer overflow is possible when initiating a file transfer to a malicious buddy over XMPP. CVE-2009-1373 - A buffer overflow issue in the 'decryptout'...

CVE-2007-5396

Format string vulnerability in the extyahoocontactadded function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle who...

DEBIAN-CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Sql injection

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-3549

CVE-2007-3549 describes an SQL injection in Buddy Zone 1.5: the vulnerable script is view_sub_cat.php and the flaw is exploitable via the cat_id parameter, allowing remote execution of arbitrary SQL commands. Affected software: Buddy Zone 1.5; vulnerable component: view_sub_cat.php (cat_id). Impa...

Sql injection

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

CVE-2007-3526

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

CVE-2007-3526

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

CVE-2007-3526

CVE-2007-3526 affects Buddy Zone 1.5 and earlier, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via specific parameters: news_id in view_news.php, cat_id in view_events.php, and member_id in video_gallery.php. The root cause is not expli...

CVE-2007-3549: Undefined Security Weakness

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-3526: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

Buddy Zone 1.5 - Multiple SQL Injections

Buddy Zone 1.5 - Multiple SQL Injections --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==--...

Buddy Zone 1.5 - Multiple SQL Injections

--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection

--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...