Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability (Windows)

This host is installed with Pidgin and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbpidginlibpurplecipherapiinfodiscvulnwin.nasl 5977 2017-04-19 09:02:22Z teissa $ Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability Windows Authors: Madhuri D...

DEBIAN-CVE-2011-4922

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...

CVE-2011-4922

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...

Design/Logic Flaw

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...

CVE-2011-4922

Pidgin (libpurple) Cipher API vulnerability CVE-2011-4922 affects cipher.c: it may retain encryption-key data in process memory, enabling local users to read sensitive information from memory/core dumps. This affects Pidgin builds prior to 2.7.10. Impact is information disclosure via memory conte...

CVE-2011-4922: Exposure of Sensitive Information to an Unauthorized Actor

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...

CentOS Update for finch CESA-2012:1102 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for finch CESA-2011:1371 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2012:1102 Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

pidgin: Stack-based buffer overwrite in MXit protocol libPurple plug-in

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

SuSE 10 Security Update : pidgin, finch and libpurple (ZYPP Patch Number 8220)

This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin. CVE-2012-3374 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descripti...

libpurple / Pidgin code execution

Code execution in MXit protocol...

Pidgin 'mxit_show_message()'基于栈的缓冲区溢出漏洞

Bugtraq ID:54322 CVE ID:CVE-2012-3374 Pidgin是一款多协议即时通信软件 如果进入的消息包含内联图像，"mxitshowmessage"函数libpurple/protocols/mxit/markup.c解析时存在一个边界错误，允许攻击者构建特制的RX消息触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码 0 Pidgin 2.x 厂商解决方案 Pidgin 2.10.5已经修复此漏洞，建议用户下载使用： http://www.pidgin.im/news/security/index.php?id=64...

DEBIAN-CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

Buffer overflow

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

CVE-2012-3374

CVE-2012-3374 affects the Pidgin/libpurple MXit protocol plugin, where a stack-based buffer overflow in markup.c could be triggered by a crafted inline image in a message to allow remote code execution. Public advisories/ Nessus entries link this to Pidgin prior to 2.10.5, with patches released t...

CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

CVE-2012-3374: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

DEBIAN-CVE-2012-2318

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

Design/Logic Flaw

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...