PT-2014-1297

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue concerns the SIMPLE protocol functionality, which allows remote attackers to have an impact via a negative Content-Length header, triggering a buffer overflow. This can potentially lead to ...

PT-2014-1298

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue concerns a problem in the libpurple component of Pidgin, where an inconsistency in HTTP response headers can be exploited by a remote attacker to cause a denial of service, leading to an...

PT-2014-3134

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is caused by multiple integer signedness errors in libpurple, allowing remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending a...

PT-2014-3135

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue arises from improper interaction with underlying library support for wide Pango layouts in gtkimhtml.c. This allows remote attackers to cause a denial of service, resulting in an applicatio...

PT-2014-1292

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is related to an integer signedness error in the MXit functionality, which can be exploited by remote attackers to cause a denial of service or potentially execute arbitrary code. This is...

PT-2014-1295

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue allows remote attackers to cause a denial of service crash via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read. This is due to a vulnerability in the...

PT-2014-1301

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is related to an integer overflow in the Gadu-Gadu parser, which can be triggered by a large Content-Length value, potentially leading to a buffer overflow. This can allow remote attackers ...

PT-2014-1293

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is related to the IRC protocol plugin in libpurple, which does not validate argument counts. This allows remote IRC servers to cause a denial of service, resulting in the application...

PT-2014-1294

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue concerns the XMPP protocol plugin in Pidgin, which does not properly verify the consistency between the 'from' address in an IQ reply and the 'to' address in an IQ request. This inconsisten...

PT-2014-1296

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue allows a remote attacker to cause a denial of service by manipulating OIM XML headers or via crafted SOAP responses, OIM XML responses, or Content-Length headers, leading to a NULL pointer...

PT-2014-1300

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is related to a buffer overflow in the libpurple library, specifically in the util.c file. This can be triggered by remote HTTP servers sending an invalid chunk-size field in chunked...

PT-2014-2379

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue concerns the improper validation of UTF-8 data in the Yahoo! protocol plugin in libpurple, which can be exploited by remote attackers to cause a denial of service, resulting in the...

Pidgin libpurple SIP/SIMPLE Content-Length Integer Overflow Vulnerability

Talos Vulnerability Report VRT-2013-1004 Pidgin libpurple SIP/SIMPLE Content-Length Integer Overflow Vulnerability January 26, 2014 CVE Number CVE-2013-6490 Description An exploitable remote code execution vulnerability exists in Pidgin’s implementation of SIP/SIMPLE message handling. An attacker...

Pidgin libpurple Mxit Emoticon Name Length Integer Overflow Vulnerability

Talos Vulnerability Report VRT-2013-1002 Pidgin libpurple Mxit Emoticon Name Length Integer Overflow Vulnerability January 26, 2014 CVE Number CVE-2013-6489 Description An exploitable remote code execution vulnerability exists in Pidgin’s implementation of the Mxit protocol in the libpurple...

Pidgin for Windows URL Handling Remote Code Execution Vulnerability

Talos Vulnerability Report VRT-2013-1003 Pidgin for Windows URL Handling Remote Code Execution Vulnerability January 26, 2014 CVE Number CVE-2013-6486 Description An exploitable remote code execution vulnerability exists in Pidgin’s implementation of HTTP URL handling. An attacker can supply a...

Fedora 20 : libgadu-1.12.0-0.2.rc1.fc20 (2013-23260)

From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...

SuSE Update for pidgin openSUSE-SU-2013:0511-1 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test $Id: gbsuse201305111.nasl 8456 2018-01-18 06:58:40Z teissa $ SuSE Update for pidgin openSUSE-SU-2013:0511-1 pidgin Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for pidgin (openSUSE-SU-2013:0511-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 4 : pidgin (ELSA-2010-0788)

From Red Hat Security Advisory 2010:0788 : Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Oracle Linux 4 : pidgin (ELSA-2009-1536)

From Red Hat Security Advisory 2009:1536 : Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which ca...