Stack overflow

Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message...

Trillian instant messenger multiple security vulnerabilities

Buffer overflows and memory corruptions in AIM/ICQ, MSN and XML-based protocols parsing...

Trillian < 3.1.10.0 Multiple Vulnerabilities

The version of Trillian installed on the remote host reportedly contains several vulnerabilities : - A stack-based buffer overflow in 'aim.dll' triggered when parsing messages with overly long attribute values within the 'FONT' tag. - A memory corruption issue within XML parsing in 'talk.dll'...

Trillian MSN MIME Header Stack-Based Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cerulean Studios Trillian Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the header parsing code for the msn protocol. When processing the...

CVE-2008-2008

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long nickname in an MSN protocol message...

Buffer overflow

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long nickname in an MSN protocol message...

CVE-2008-2008

Affected software: Cerulean Studios Trillian Basic and Pro 3.1.9.0. Component: Display Names message feature. Root cause: buffer overflow triggered by a long nickname in an MSN protocol message. Impact: remote attackers can cause a denial of service (crash) or execute arbitrary code. Exploitation...

CVE-2008-2008

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long nickname in an MSN protocol message...

Trillian buffer overflow

Buffer overflow on oversized MSN messenger nickname...

Microsoft HeartbeatCtl ActiveX控件远程溢出漏洞

BUGTRAQ ID: 28882 CVECAN ID: CVE-2007-6255 Microsoft HeartbeatCtl ActiveX控件用于在MSN游戏站点玩多用户游戏。 HeartbeatCtl ActiveX控件在处理Host参数时存在缓冲区溢出漏洞，如果用户受骗浏览了特制的HTML文档的话，就可能触发这个溢出，导致执行任意指令。 Microsoft HeartbeatCtl ActiveX 临时解决方法： 在IE中为以下CLSID设置kill bit禁用有漏洞的ActiveX： E5D419D6-A846-4514-9FAD-97E826C84822...

[SECURITY] Fedora 8 Update: centerim-4.22.4-1.fc8

CenterIM is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, MSN, AIM TOC, IRC, Gadu-Gadu and Jabber protocols. Internal RSS reader and a client for LiveJournal are provided...

pidgin DoS

Application crash on user not on the target's buddy list sending a "nudge," a feature of the MSN protocol...

FLEA-2007-0057-1 pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Foresight Linux Essential Advisory: 2007-0057-1 Published: 2007-10-02 Rating: Minor Updated Versions: pidgin=/foresight.rpath.org@fl:1-devel//1/2.2.1-1-0.1 group-dist=/foresight.rpath.org@fl:1-devel//1/1.4.0-0.5-8 References:...

[slackware-security] pidgin

A new pidgin package is available for Slackware 12.0 to fix a minor fix security issue. More details about this issue may be found here: http://www.pidgin.im/news/security/?id=23 Here are the details from the Slackware 12.0 ChangeLog: patches/packages/pidgin-2.2.1-i486-1slack12.0.tgz: Upgraded to...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Memory corruption

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

DEBIAN-CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

CVE-2007-4996

CVE-2007-4996 affects libpurple in Pidgin prior to 2.2.1. It arises from how MSN nudge messages are processed when the sender is not on the receiver’s buddy list, allowing a remote attacker to trigger a denial of service by causing an access to an invalid memory location (crash). The description ...