CVE-2009-3085

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

Pidgin Multiple Vulnerabilities - Sep09 (Windows)

This host has Pidgin installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultvulnsep09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Pidgin Multiple Vulnerabilities - Sep09 Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Pidgin Multiple Vulnerabilities - Sep09 (Linux)

This host has Pidgin installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultvulnsep09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Pidgin Multiple Vulnerabilities - Sep09 Linux Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Debian: Security Advisory (DSA-1870-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 1870-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 1870-1. OpenVAS Vulnerability Test $Id: deb18701.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1870-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. VID 59e7af2d-8db7-11de-883b-001e3300a30d OpenVAS Vulnerability Test $ Description: Auto generated from VID 59e7af2d-8db7-11de-883b-001e3300a30d Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

DEBIAN-CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

Design/Logic Flaw

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3026

CVE-2009-3026 concerns Pidgin (libpurple) up to version 2.6.0, where the XMPP/Jabber client may ignore the SSL/TLS requirement when connecting to very old Jabber servers. This behavior can establish a non‑encrypted session, enabling a remote attacker to sniff user conversations as described in th...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-2694

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

CVE-2009-2694

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

DEBIAN-CVE-2009-2694

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

CVE-2009-2694

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

Pidgin Libpurple库msn_slplink_process_msg()函数内存破坏漏洞

CVECAN ID: CVE-2009-2694 Pidgin是支持多种协议的即时通讯客户端。 Pidgin和其他一些即时消息客户端所使用的Libpurple库中存在内存破坏漏洞，远程攻击者可以通过向聊天客户端发送特制的MSNSLP报文触发这个漏洞，导致执行任意代码。 攻击需要发送两个连续的MSNSLP消息，第一个用于对slpmsg存储会话id，第二个用于触发漏洞，最终目标是到达msnslplinkprocessmsg中的memcpy调用。需要创建偏移为非0的MSNSLP消息，因为这个值是memcpy的目标。...