Miranda IM silent TLS failure

Summary: Under certain conditions, Miranda ignores the "Use TLS" setting in Jabber accounts and uses an unencrypted connection. Affected: Miranda IM instant messenger, at least versions 0.8.16, 0.9.0 alpha build 6 Unicode and SVN rev. 11383 Description: If the following conditions are met: - "Use...

CVE-2007-5543

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5542

Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5543

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5543

CVE-2007-5543 describes a stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 triggered by a crafted Yahoo! Messenger packet, enabling remote code execution. The root cause is improper bounds checking in the packet handling path of the Yahoo Messenger-related code. Affected software: Mirand...

CVE-2007-5542

The CVE-2007-5542 entry concerns Miranda IM. A stack-based buffer overflow in Miranda IM 0.6.8 (and related notes to 0.7.0) allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. The vulnerability’s impact is remote code execution with the potential for full comp...

CVE-2007-5542

Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

Unfixed XSS vulnerability at addons.miranda-im.org

Security researcher r@nger, has submitted on 04/05/2008 a cross-site-scripting XSS vulnerability affecting addons.miranda-im.org, which at the time of submission ranked 23196 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/05/2008. It is...

Format string

Format string vulnerability in the extyahoocontactadded function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle who...

CVE-2007-5396

Format string vulnerability in the extyahoocontactadded function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle who...

CVE-2007-5396

Format string vulnerability in the extyahoocontactadded function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle who...

CVE-2007-5396

Miranda IM 0.7.1 is affected by a format-string vulnerability in the ext_yahoo_contact_added function (yahoo.c) that allows remote code execution via a Y7 Buddy Authorization packet containing format specifiers in the contact Yahoo! handle (who). This CVE-2007-5396 issue is triggered by crafted i...

Miranda IM多个远程栈溢出漏洞

BUGTRAQ ID: 26115 CVECAN ID: CVE-2007-5542,CVE-2007-5543 Miranda IM是Microsoft Windows平台上使用的开源多协议即时消息客户端。 Miranda IM没有正确地实现雅虎通协议，如果向客户端发送了畸形的雅虎通报文的话，就可以触发栈溢出，导致执行任意指令。 Miranda Miranda IM 0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/showfiles.php?groupid=94142...

Miranda instant messenger multiple security vulnerabilities

Yahoo! messenger plugin multiple buffer overflows...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...

Buffer overflow

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5590

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

EUVD-2007-5565

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5590

Miranda IM is affected by stack-based buffer overflow vulnerabilities described across multiple CVEs in 2007. Specifically, Red Hat and NVD entries indicate that Miranda IM 0.6.8 and 0.7.0 are exploitable via crafted Yahoo! Messenger packets to gain arbitrary code execution, with potential overla...

CVE-2007-5590

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...