Design/Logic Flaw

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

Pidgin OSCAR插件非法内存访问拒绝服务漏洞

Bugraq ID: 36719 CVE ID：CVE-2009-3615 Pidgin是一款多协议即时通信软件。 Pidgin oscar协议插件处理特殊构建的消息如ICQ消息存在问题，可导致不正确内存访问而使应用程序崩溃。 目前没有详细漏洞细节提供。 Pidgin Pidgin 2.6.1 Pidgin Pidgin 2.6 Pidgin Pidgin 2.5.9 Pidgin Pidgin 2.5.8 Pidgin Pidgin 2.5.7 Pidgin Pidgin 2.5.6 Pidgin Pidgin 2.5.6 Pidgin Pidgin 2.5.5 Pidgin Pidg...

Gaim AIM-ICQ Protocol Handling Buffer Overflow (CVE-2005-2103)

Gaim is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN, Yahoo!, and IRC. Gaim allows one user to log into multiple accounts on multiple IM networks simultaneously. The AIM/ICQ protocol is a TCP based instant message...

ICQ Toolbar version detection

This script detects the installed version of ICQ Toolbar and sets the result in KB. OpenVAS Vulnerability Test $Id: gbicqtoolbardetect.nasl 5372 2017-02-20 16:26:11Z cfi $ ICQ Toolbar Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability

This host has ICQ Toolbar installed and is prone to Remote Denial of Service Vulnerability OpenVAS Vulnerability Test $Id: gbicqtoolbaractvxctrldosvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability Authors: Antu Sanadi Copyright:...

ICQ Toolbar Detection (Windows SMB Login)

SMB login-based detection of ICQ Toolbar. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800693"...

CVE-2008-7135

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the IsChecked method, a different vector than CVE-2008-7136...

Design/Logic Flaw

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the 1 RequestURL, 2 GetPropertyById, or 3 SetPropertyById method, different vectors than CVE-2008-7135...

Code injection

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the IsChecked method, a different vector than CVE-2008-7136...

CVE-2008-7136

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the 1 RequestURL, 2 GetPropertyById, or 3 SetPropertyById method, different vectors than CVE-2008-7135...

CVE-2008-7136

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the 1 RequestURL, 2 GetPropertyById, or 3 SetPropertyById method, different vectors than CVE-2008-7135...

CVE-2008-7135

toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the IsChecked method, a different vector than CVE-2008-7136...

CVE-2008-7135

ICQ Toolbar (ICQToolbar) version 2.3 is affected by CVE-2008-7135 through the toolbaru.dll ActiveX control. The vulnerability allows an attacker to trigger a remote denial of service (toolbar crash) by sending a long argument to the IsChecked method. This is a DoS via a specific argument length/v...

CVE-2008-7136

CVE-2008-7136 concerns ICQ Toolbar (ICQToolbar) version 2.3, where the ICQ Toolbar’s ActiveX control toolbaru.dll is vulnerable. The weakness allows remote attackers to cause a denial of service (toolbar crash) by sending a long argument to one of three methods: RequestURL, GetPropertyById, or Se...

[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

ICQ入站消息HTML注入漏洞

BUGTRAQ ID: 36041 ICQ是一款流行的即时通讯聊天工具。 ICQ客户端软件存在HTML注入漏洞。由于用于显示所接收到消息的窗口具有Web浏览器的性质，因此远程攻击者可以向ICQ客户端发送包含有文本数据的特制消息，其中的文本数据会在入站消息窗口中解释并显示为HTML代码。 这个漏洞可能造成两种影响： 1. 信息泄露。例如，攻击者可以注入可能导致信息泄露的IMG标签。 2. 欺骗。攻击者可以再消息窗口中伪造ICQ客户端软件的系统消息、界面元素（按键、链接）等。 AOL ICQ 6.5 厂商补丁： AOL ---...

ICQ 6.5 HTML Injection

ShineShadow Security Report 14082009-08 TITLE ICQ 6.5 HTML-injection vulnerability BACKGROUND With more than 700 million instant messages sent and received every day, ICQ has been known to the online community as a messaging service. Today, a little more than a decade after the first ICQ instant...

openSUSE Security Update : finch (finch-1088)

Several bugfixes were done for the Instant Messenger Pidgin : - Malformed responses to file transfers could cause a buffer overflow in pidgin CVE-2009-1373 and specially crafted packets could crash it CVE-2009-1375. - The fix against integer overflows in the msn protocol handling was incomplete...

openSUSE Security Update : finch (finch-188)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...

Ubuntu: Security Advisory (USN-796-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...