827 matches found
CVE-2009-3084
The CVE affects the MSN protocol plugin in libpurple (used by Pidgin up to 2.6.1). The vulnerability is in msn_slp_process_msg when handling handwritten Ink messages, caused by an uninitialized variable and an incorrect UTF16-LE charset name, allowing a remote attacker to crash the application (d...
Pidgin Libpurple库多个拒绝服务漏洞
BUGTRAQ ID: 36277 CVECAN ID: CVE-2009-2703 Pidgin是支持多种协议的即时通讯客户端。 远程攻击者可以通过向Pidgin的libpurple库提交各种恶意会话消息导致拒绝服务。 1 XMPP协议实现中的错误可能在将恶意的表情符号处理为出错响应时导致崩溃。 2 MSN协议实现中转换硬写入消息的编码时存在错误，如果错误的使用了未初始化的变量就可能导致崩溃。 3 MSN协议插件从入站的SLP invite消息中获得某些字段，如果其中缺少某些字段协议插件就会试图引用空指针，导致崩溃。 4...
RedHat Security Advisory RHSA-2009:1218
The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's MSN protocol...
Ubuntu USN-820-1 (pidgin)
The remote host is missing an update to pidgin announced via advisory USN-820-1. OpenVAS Vulnerability Test $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-820-1 pidgin Authors: Thomas Rein...
RedHat Security Advisory RHSA-2009:1218
The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin...
Ubuntu: Security Advisory (USN-820-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : finch (finch-1248)
This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-1248. The te...
Pidgin MSN SLP Packets Denial Of Service Vulnerability (Windows)
This host has Pidgin installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginmsnslpdosvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Pidgin MSN SLP Packets Denial Of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 SecPod...
Pidgin < 2.5.9 MSN SLP Packets DoS Vulnerability - Linux
Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin";...
Pidgin MSN SLP Packets Denial Of Service Vulnerability - Windows
Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerability (USN-820-1)
Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding...
FreeBSD : pidgin -- MSN overflow parsing SLP messages (59e7af2d-8db7-11de-883b-001e3300a30d)
Secunia reports : A vulnerability has been reported in Pidgin, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error in the 'msnslplinkprocessmsg' function when processing MSN SLP messages and can be exploited to corrupt...
CVE-2009-2694
The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...
DEBIAN-CVE-2009-2694
The msnslplinkprocessmsg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin formerly Gaim before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by sending multiple...
Libpurple buffer overflow vulnerability
Overview The Libpurple instant messenger library contains a vulnerability that may allow an attacker to execute arbitrary code. Description Libpurple is an instant messenger IM library that is used by various programs to connect to multiple networks. Libpurple contains a buffer overflow...
[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
USN-820-1: Pidgin vulnerability
Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges...
CentOS 3 / 5 : pidgin (CESA-2009:1218)
Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...
RHEL 3 / 4 / 5 : pidgin (RHSA-2009:1218)
Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multip...
