CVE-2008-2008

Affected software: Cerulean Studios Trillian Basic and Pro 3.1.9.0. Component: Display Names message feature. Root cause: buffer overflow triggered by a long nickname in an MSN protocol message. Impact: remote attackers can cause a denial of service (crash) or execute arbitrary code. Exploitation...

CVE-2008-2008: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long nickname in an MSN protocol message...

Trillian buffer overflow

Buffer overflow on oversized MSN messenger nickname...

Microsoft HeartbeatCtl ActiveX控件远程溢出漏洞

BUGTRAQ ID: 28882 CVECAN ID: CVE-2007-6255 Microsoft HeartbeatCtl ActiveX控件用于在MSN游戏站点玩多用户游戏。 HeartbeatCtl ActiveX控件在处理Host参数时存在缓冲区溢出漏洞，如果用户受骗浏览了特制的HTML文档的话，就可能触发这个溢出，导致执行任意指令。 Microsoft HeartbeatCtl ActiveX 临时解决方法： 在IE中为以下CLSID设置kill bit禁用有漏洞的ActiveX： E5D419D6-A846-4514-9FAD-97E826C84822...

[SECURITY] Fedora 8 Update: centerim-4.22.4-1.fc8

CenterIM is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, MSN, AIM TOC, IRC, Gadu-Gadu and Jabber protocols. Internal RSS reader and a client for LiveJournal are provided...

FLEA-2007-0057-1 pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Foresight Linux Essential Advisory: 2007-0057-1 Published: 2007-10-02 Rating: Minor Updated Versions: pidgin=/foresight.rpath.org@fl:1-devel//1/2.2.1-1-0.1 group-dist=/foresight.rpath.org@fl:1-devel//1/1.4.0-0.5-8 References:...

pidgin DoS

Application crash on user not on the target's buddy list sending a "nudge," a feature of the MSN protocol...

[slackware-security] pidgin

A new pidgin package is available for Slackware 12.0 to fix a minor fix security issue. More details about this issue may be found here: http://www.pidgin.im/news/security/?id=23 Here are the details from the Slackware 12.0 ChangeLog: patches/packages/pidgin-2.2.1-i486-1slack12.0.tgz: Upgraded to...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Memory corruption

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

DEBIAN-CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

CVE-2007-4996 affects libpurple in Pidgin prior to 2.2.1. It arises from how MSN nudge messages are processed when the sender is not on the receiver’s buddy list, allowing a remote attacker to trigger a denial of service by causing an access to an invalid memory location (crash). The description ...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996: Undefined Security Weakness

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

MSN Messenger视频对话堆溢出漏洞(MS07-054)

BUGTRAQ ID: 25461 CVECAN ID: CVE-2007-2931 MSN Messenger是微软发布的非常流行的即时通讯聊天工具。 MSN VIDEO处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 MSN VIDEO的协议分为两个大部分：webcam和video conversation，其中webcam带有一个9个字节的头： （UDP header）9d 49 e1 8e 4a 09 be 09 0a payload 第1、2个字节代表payload长度（0x499d & 2047 = 413），后面的payload长度就为413了。...

Microsoft MSN Messenger / Windows Live Messenger memory corruption

Memory corruption on Webcam or Video Chat session establishment...

Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)

Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution 942099 Published: September 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a publicly disclosed...