887 matches found
openSUSE 10 Security Update : finch (finch-6465)
This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-6465. The te...
SuSE 11 Security Update : Pidgin (SAT Patch Number 1207)
This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...
SuSE 11 Security Update : pidgin (SAT Patch Number 1245)
This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2009:1453 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...
RHEL 4 / 5 : pidgin (RHSA-2009:1453)
Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...
Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)
The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...
Pidgin < 2.6.2 Multiple DoS Vulnerabilities - Windows
Pidgin is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Pidgin < 2.6.2 Multiple DoS Vulnerabilities - Linux
Pidgin is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"...
Pidgin Multiple Denial Of Service Vulnerabilities (Windows)
This host has Pidgin installed and is prone to multiple Denial of Service vulnerabilities. Vulnerabilities Insight: - An error in libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple can trigger a NULL-pointer dereference when processing TOPIC messages which lack a topic string....
Mandrake Security Advisory MDVSA-2009:230 (pidgin)
The remote host is missing an update to pidgin announced via advisory MDVSA-2009:230. OpenVAS Vulnerability Test $Id: mdksa2009230.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:230 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
libpurple / Pidgin multiple security vulnerabilities
Multiple vulnerabilities on MSN, Yahoo IM, IRC, jabber protocol parsing...
Mandriva Linux Security Advisory : pidgin (MDVSA-2009:230)
Security vulnerabilities has been identified and fixed in pidgin : The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of...
Pidgin MSN <= 2.5.8 Remote Code Execution Exploit
No description provided by source. / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library "libmsn"...
Pidgin MSN 2.5.8 Code Execution
/ Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library "libmsn" used by pidgin doesn't handle...
Pidgin MSN 2.5.8 - Remote Code Execution
Pidgin MSN 2.5.8 - Remote Code Execution / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library...
Pidgin MSN <= 2.5.8 Remote Code Execution Exploit
Exploit for windows platform in category remote exploits ================================================= Pidgin MSN = 2.5.8 Remote Code Execution Exploit ================================================= / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues Description: Pidgin is a...
Null pointer dereference
The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...
Code injection
The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...
CVE-2009-3084
The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...
CVE-2009-3084
The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...