9 matches found
[SECURITY] Fedora 44 Update: kf6-knotifyconfig-6.25.0-1.fc44
KDE Frameworks 6 Tier 3 module for KNotify configuration...
[SECURITY] Fedora 23 Update: kf5-knotifyconfig-5.24.0-1.fc23
KDE Frameworks 5 Tier 3 module for KNotify configuration...
[SECURITY] Fedora 24 Update: kf5-knotifyconfig-5.24.0-1.fc24
KDE Frameworks 5 Tier 3 module for KNotify configuration...
Gentoo Security Advisory GLSA 201402-27
Gentoo Linux Local Security Checks GLSA 201402-27 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
GLSA-201402-27 : pidgin-knotify: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201402-27 pidgin-knotify: Arbitrary code execution pidgin-knotify does not properly sanitize shell metacharacters from received messages. Impact : A remote attacker could send a specially crafted instant message, possibly resultin...
CVE-2010-3088
The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...
Code injection
The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...
CVE-2010-3088
Summary: CVE-2010-3088 affects the pidgin-knotify plugin for Pidgin, versions 0.2.1 and earlier. The root cause is improper sanitization of shell metacharacters in received messages within the notify function (pidgin-knotify.c). Impact: remote attackers could cause arbitrary code execution with t...
Fedora 11 : konversation-1.2.3-1.fc11 (2010-1883)
Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...