676 matches found
Pidgin: Multiple vulnerabilities
Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...
Trillian Buffer Overflow Vulnerability
This host is installed with Trillian and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtrillianbofvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ Trillian Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2007-5543
Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...
CVE-2007-5542
Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...
CVE-2007-5543
Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...
CVE-2007-5543
CVE-2007-5543 describes a stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 triggered by a crafted Yahoo! Messenger packet, enabling remote code execution. The root cause is improper bounds checking in the packet handling path of the Yahoo Messenger-related code. Affected software: Mirand...
CVE-2007-5542
The CVE-2007-5542 entry concerns Miranda IM. A stack-based buffer overflow in Miranda IM 0.6.8 (and related notes to 0.7.0) allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. The vulnerability’s impact is remote code execution with the potential for full comp...
CVE-2007-5542
Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...
CVE-2008-6444
Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...
Stack overflow
Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...
CVE-2008-6444
CVE-2008-6444 affects Baidu Hi IM; vulnerable component is CSTransfer.dll, where a stack-based buffer overflow could allow remote code execution via a crafted packet, likely due to an improper length value. Connections across sources confirm the same description; no specific exploit details or af...
CVE-2008-6444
Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...
Phishing attack hits Gmail chat
Gmail users have had a rough time of it this week. Just a few hours after the hugely popular webmail service cratered on Tuesday morning, the instant-messaging feature associated with the site became the target of a phishing attack. The New York Times Bits blog has a post explaining the mechanics...
GMail, GTalk phishing scam underway
Attention GMail and GTalk users: There’s a major spam run underway with social engineering lures to steal your login cretentials. This image shows a GMail message that purports to be an account termination warning from Google but, if a user is tricked into clicking on the link, he/she is redirect...
Cross site scripting
The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting XSS, which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable...
CVE-2009-0247
The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting XSS, which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable...
CVE-2009-0247
The CVE-2009-0247 issue affects the 53KF Web IM 2009 Home, Professional, and Enterprise editions. The vulnerability arises because the server relies on client-side protection against cross-site scripting (XSS), allowing an attacker to perform XSS by using a modified client to send a crafted IM me...
53KF Web Instant Messenger Cross Site Scripting
Application: 53KF Web IM Vendor: www.53kf.com Corporation: LiuDu, Inc. Version: Latest: 19 JAN 2009 - Home Edition, Enterprise & Professional Description: 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities Background: ============== 53KF is a web-based group chat tool that lets invite a client...
53KF Web IM 2009 Cross-Site Scripting Vulnerabilities
Application: 53KF Web IM Vendor: www.53kf.com Corporation: LiuDu, Inc. Version: Latest: 19 JAN 2009 - Home Edition, Enterprise & Professional Description: 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities Background: ============== 53KF is a web-based group chat tool that lets invite a client...