PT-2013-2206

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to the Sametime protocol plugin in libpurple, where the sametime.c file does not properly terminate long user IDs. This allows remote servers to cause a denial of service,...

CVE-2013-0274: Undefined Security Weakness

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0273: Undefined Security Weakness

sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service application crash via a crafted packet...

CVE-2013-0272: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0271

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

CVE-2013-0273

sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service application crash via a crafted packet...

PT-2013-2205

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to a buffer overflow in the http.c file within the MXit protocol plugin in libpurple. This allows remote servers to execute arbitrary code via a long HTTP header. Recommendations...

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

PT-2013-2207

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue is related to the improper termination of long strings in UPnP responses, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This ca...

PT-2013-2204

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.7 Description The issue allows remote attackers to create or overwrite files via a crafted pathname, specifically in the MXit protocol plugin in libpurple. Recommendations For versions prior to 2.10.7, update to...

CVE-2013-0271: Undefined Security Weakness

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted 1 mxit or 2 mxit/imagestrips pathname...

Slackware 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : pidgin (SSA:2013-044-01)

New pidgin packages are available for Slackware 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-044-01. The text...

pidgin

New pidgin packages are available for Slackware 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/pidgin-2.10.7-i486-1slack14.0.txz: Upgraded. This update fixes several security issues: Remote MXit user cou...

SuSE 11.1 Security Update : finch, libpurple and pidgin (SAT Patch Number 6294)

Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...

SuSE 11.1 Security Update : pidgin, finch and libpurple (SAT Patch Number 6534)

This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin. CVE-2012-3374 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11.1 Security Update : pidgin-otr (SAT Patch Number 6380)

A format string flaw in pidgin-otr could have caused a denial of service condition or even potentially allowed attackers to execute arbitrary code. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.1 Security Update : finch, libpurple and pidgin (SAT Patch Number 6294)

Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...

Security fix for the ALT Linux 6 package pidgin version 2.10.6-alt1.M60P.1

Oct. 25, 2012 Gleb Fotengauer-Malinovskiy 2.10.6-alt1.M60P.1 - 2.10.6 - p6 security update fix CVE-2012-3374...

Pidgin MXit Message Parsing Buffer Overflow Vulnerability (Windows)

This host has installed with Pidgin and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbpidginmxitmsgparsingbofvulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ Pidgin MXit Message Parsing Buffer Overflow Vulnerability Windows Authors: Madhuri D Copyright: Copyright c...