DEBIAN-CVE-2009-3084

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

CVE-2009-3084

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

CVE-2009-3083

The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...

CVE-2009-3084

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

CVE-2009-3083

CVE-2009-3083 affects Pidgin (libpurple) MSN protocol plug-in. The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c can crash via a malformed MSNSLP invite when required fields are missing, causing a remote denial-of-service (NULL pointer dereference). Affected product: Pidgin prior to ...

CVE-2009-3084

The CVE affects the MSN protocol plugin in libpurple (used by Pidgin up to 2.6.1). The vulnerability is in msn_slp_process_msg when handling handwritten Ink messages, caused by an uninitialized variable and an incorrect UTF16-LE charset name, allowing a remote attacker to crash the application (d...

CVE-2009-3084

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

CVE-2009-3084

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

CVE-2009-3084: Improper Input Validation

The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...

Pidgin Libpurple库多个拒绝服务漏洞

BUGTRAQ ID: 36277 CVECAN ID: CVE-2009-2703 Pidgin是支持多种协议的即时通讯客户端。 远程攻击者可以通过向Pidgin的libpurple库提交各种恶意会话消息导致拒绝服务。 1 XMPP协议实现中的错误可能在将恶意的表情符号处理为出错响应时导致崩溃。 2 MSN协议实现中转换硬写入消息的编码时存在错误，如果错误的使用了未初始化的变量就可能导致崩溃。 3 MSN协议插件从入站的SLP invite消息中获得某些字段，如果其中缺少某些字段协议插件就会试图引用空指针，导致崩溃。 4...

CVE-2009-3083: Improper Restriction of Operations within the Bounds of a Memory Buffer

The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...

Ubuntu USN-820-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory USN-820-1. OpenVAS Vulnerability Test $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-820-1 pidgin Authors: Thomas Rein...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's MSN protocol...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin...

Ubuntu: Security Advisory (USN-820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : finch (finch-1248)

This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-1248. The te...

Pidgin MSN SLP Packets Denial Of Service Vulnerability (Windows)

This host has Pidgin installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginmsnslpdosvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Pidgin MSN SLP Packets Denial Of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 SecPod...

Pidgin MSN SLP Packets Denial Of Service Vulnerability - Windows

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin < 2.5.9 MSN SLP Packets DoS Vulnerability - Linux

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin";...

Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerability (USN-820-1)

Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding...