Libpurple buffer overflow vulnerability

Overview The Libpurple instant messenger library contains a vulnerability that may allow an attacker to execute arbitrary code. Description Libpurple is an instant messenger IM library that is used by various programs to connect to multiple networks. Libpurple contains a buffer overflow...

CVE-2009-2694

The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...

[SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1870-1 [email protected] http://www.debian.org/security/ Nico Golde August 19th, 2009 http://www.debian.org/security/faq -...

Libpurple / Pidgin memory corruption

Memory corruption on malformed MSN protocol message...

DSA-1870-1 pidgin - insufficient input sanitization

Bulletin has no description...

CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Libpurple msnslplinkprocessmsg Arbitrary Write Vulnerability 1. Advisory Information Title: Libpurple msnslplinkprocessmsg Arbitrary Write Vulnerability Advisory ID:...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1218 Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability

Advisory ID Internal CORE-2009-0727 1. Advisory Information Title: Libpurple msnslplinkprocessmsg Arbitrary Write Vulnerability Advisory ID: CORE-2009-0727 Date published: 2009-08-18 Date of last update: 2009-08-18 Vendors contacted: Pidgin team Release mode: Coordinated release 2. Vulnerability...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problems: CVE-2009-1373 Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP...

CentOS Security Advisory CESA-2009:1139 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1139. CESA-2009:1139 64374 2 $Id: ovcesa20091139.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1139 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:147 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:147. OpenVAS Vulnerability Test $Id: mdksa2009147.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:147 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandrake Security Advisory MDVSA-2009:147 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:147. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1139 Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. VID b1ca65e6-5aaf-11de-bc9b-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID b1ca65e6-5aaf-11de-bc9b-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: pidgin, libpurple, finch

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-09-031: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-031 June 8, 2009 -- CVE ID: CVE-2009-1376 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details: This...

libpurple / Pidgin buffer overflow

Buffer overflow on MSN SLP messages parsing...

Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of messaging applications that make use of the libpurple library. User interaction is not required to exploit this vulnerability. The specific flaw exists in the implementation of the MSN...

Fedora Core 9 FEDORA-2009-5552 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. OpenVAS Vulnerability Test $Id: fcore20095552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5552 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

PT-2009-1055 · Pidgin +2 · Pidgin +2

Name of the Vulnerable Software and Affected Versions: Pidgin versions prior to 2.5.6 libpurple versions prior to 2.5.6 Description: The issue is caused by multiple integer overflows in the MSN protocol handler, allowing remote attackers to execute arbitrary code via a malformed SLP message with ...