[USN-796-1] Pidgin vulnerability

=========================================================== Ubuntu Security Notice USN-796-1 July 06, 2009 pidgin vulnerability CVE-2009-1889 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04...

Pidgin instant messenger DoS

Memory exhaustion on OSCAR ICQ ICQWebMessage message processing...

Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerability (USN-796-1)

Yuriy Kaminskiy discovered that Pidgin did not properly handle certain messages in the ICQ protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

USN-796-1: Pidgin vulnerability

Yuriy Kaminskiy discovered that Pidgin did not properly handle certain messages in the ICQ protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash...

RHEL 4 / 5 : pidgin (RHSA-2009:1139)

Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts...

Moderate: Red Hat Security Advisory: pidgin security and bug fix update

Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts...

pidgin特制ICQ Web消息拒绝服务漏洞

BUGTRAQ ID: 35530 CVECAN ID: CVE-2009-1889 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的实时通讯开放系统（OSCAR）协议实现中存在越界内存访问漏洞。如果远程ICQ用户向使用这个协议的Pidgin用户发送了特制web消息的话，就会导致分配过多的内存，客户端可能会崩溃。 Pidgin 2.5.8 厂商补丁： Pidgin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://developer.pidgin.im/ticket/9483...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

DEBIAN-CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

CVE-2009-1889 affects Pidgin's OSCAR protocol implementation. A remote ICQ web message can be misinterpreted (ICQWebMessage vs ICQSMS), triggering large memory allocation and causing a denial of service (Pidgin crash). Documents consistently describe this DoS via crafted ICQ web messages and note...

ICQ 'ICQToolBar.dll' Buffer Overflow Vulnerability

This host has ICQ installed and is prone to Stack-based Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbicqbofvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ ICQ 'ICQToolBar.dll' Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

ICQ Version Detection

This script detects the installed version of ICQ Client and sets the result in KB. OpenVAS Vulnerability Test $Id: gbicqdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ ICQ Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

ICQ Version Detection

This script detects the installed version of ICQ Client. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ICQ 'ICQToolBar.dll' Buffer Overflow Vulnerability

ICQ is prone to a stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in the URL Search Hook ICQToolBar.dll in ICQ 6.5 allows remote attackers to cause a denial of service persistent crash and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder...

CVE-2009-1915

Stack-based buffer overflow in the URL Search Hook ICQToolBar.dll in ICQ 6.5 allows remote attackers to cause a denial of service persistent crash and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder...

CVE-2009-1915

Stack-based buffer overflow in the URL Search Hook ICQToolBar.dll in ICQ 6.5 allows remote attackers to cause a denial of service persistent crash and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder...

CVE-2009-1915

Summary (CVE-2009-1915) : A stack-based buffer overflow exists in ICQ 6.5's URL Search Hook (ICQToolBar.dll). The vulnerability can be triggered by an Internet Shortcut (.URL) file containing an excessively long URL parameter, causing a crash in Explorer and potentially allowing arbitrary code ex...

EUVD-2009-1910

Stack-based buffer overflow in the URL Search Hook ICQToolBar.dll in ICQ 6.5 allows remote attackers to cause a denial of service persistent crash and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder...