Mandriva Update for libotr MDVSA-2012:131 (libotr)

Check for the Version of libotr OpenVAS Vulnerability Test Mandriva Update for libotr MDVSA-2012:131 libotr Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Debian DSA-2526-1 : libotr - heap-based buffer overflows

Just Ferguson discovered that libotr, an off-the-record OTR messaging library, can be forced to perform zero-length allocations for heap buffers that are used in base64 decoding routines. An attacker can exploit this flaw by sending crafted messages to an application that is using libotr to perfo...

DSA-2526-1 libotr - buffer overflow

Bulletin has no description...

CVE-2012-3461

The 1 otrlbase64otrdecode function in src/b64.c; 2 otrlprotodatareadflags and 3 otrlprotoacceptdata functions in src/proto.c; and 4 decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a deni...

Debian Security Advisory DSA 2476-1 (pidgin-otr)

The remote host is missing an update to pidgin-otr announced via advisory DSA 2476-1. OpenVAS Vulnerability Test $Id: deb24761.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2476-1 pidgin-otr Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2476-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2476-1 : pidgin-otr - format string vulnerability

intrigeri discovered a format string error in pidgin-otr, an Off-the-Record Messaging plugin for Pidgin. This could be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The problem is only in pidgin-otr. Other applications which use libotr are not...

DSA-2476-1 pidgin-otr - format string vulnerability

Bulletin has no description...

FreeBSD : pidgin-otr -- format string vulnerability (aa71daaa-9f8c-11e1-bd0a-0082a0c18826)

The authors report : Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The flaw is in pidgin-otr, not in libotr. Other applications...

PT-2012-6326 · Libotr +1 · Libotr +1

Name of the Vulnerable Software and Affected Versions: libotr versions prior to 3.2.1 Description: The issue is related to the allocation of a zero-length buffer when decoding a base64 string, which can lead to a denial of service application crash via a message with a specific value. This can be...