CVE-2017-2448

CVE-2017-2448 is an Apple Keychain vulnerability affecting iOS < 10.3, macOS < 10.12.4, and tvOS

Apple TV < 10.2 Multiple Vulnerabilities

Binary data 700035.prm...

MGASA-2017-0043 Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Information disclosure

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

CVE-2016-9107 concerns the Gajim OTR plugin, where information is sent in cleartext when using XHTML. This leads to a potential information disclosure vulnerability, allowing remote attackers to obtain sensitive data via unspecified vectors. The affected component is the Gajim OTR plugin; the roo...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

openSUSE Security Update : kopete (openSUSE-2017-19)

This update for kopete fixes the following issues : - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

OPENSUSE-SU-2017:0035-1 Security update for kopete

This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535...

OPENSUSE-SU-2017:0034-1 Security update for kopete

This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535...

GLSA-201701-10 : libotr, Pidgin OTR: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-10 libotr, Pidgin OTR: Remote execution of arbitrary code Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please review the CVE identifiers for more information. Impact : A remote attacker could send a special...

openSUSE Security Update : irc-otr (openSUSE-2016-1529)

This updates irc-otr to version 1.0.2 and fixes the following issues : - Only the first line of messages transmitted via OTR sessions was a PRIVMSG and additional data was sent as a raw command to the IRC server boo1016942. - Detect the libotr-emitted HTML-formatted init string and replace it wit...

openSUSE Security Update : mcabber (openSUSE-2016-1502)

This update for mcabber fixes the following issues : - Update to version 1.0.4 changes since 1.0.2 : - Check the origin of roster pushes boo1014976, CVE-2015-8688 Gajim, https://gultsch.de/gajimrosterpushandmessageinterce ption.html - Link with the tinfo library. - Fix default modules directory o...

CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

DEBIAN-CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

SUSE: Security Advisory for pidgin-otr (SUSE-SU-2016:0912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-8833

CVE-2015-8833 is a use-after-free vulnerability in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin. The flaw occurs in the create_smp_dialog function (gtk-dialog.c) and is triggered via the “Authenticate buddy” path, allowing remote attackers to execute arbitrary code...