CVE-2012-2369

Format string vulnerability in the logmessagecb function in otr-plugin.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message...

CVE-2012-2369

CVE-2012-2369 : A format-string vulnerability in the log_message_cb() function of the pidgin-otr plugin (Off-the-Record Messaging) for Pidgin, up to version before 3.2.1, could allow remote attackers to execute arbitrary code. The flaw is triggered by format specifiers in data used to generate lo...

CVE-2012-2369

Format string vulnerability in the logmessagecb function in otr-plugin.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message...

Fedora Update for pidgin-otr FEDORA-2012-8063

Check for the Version of pidgin-otr OpenVAS Vulnerability Test Fedora Update for pidgin-otr FEDORA-2012-8063 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Debian DSA-2476-1 : pidgin-otr - format string vulnerability

intrigeri discovered a format string error in pidgin-otr, an Off-the-Record Messaging plugin for Pidgin. This could be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The problem is only in pidgin-otr. Other applications which use libotr are not...

Fedora Update for pidgin-otr FEDORA-2012-8063

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : pidgin-otr-3.2.1-1.fc16 (2012-8063)

New release addresses Format string vulnerability CVE-2012-2369 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

[SECURITY] [DSA 2476-1] pidgin-otr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2476-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire May 19, 2012 http://www.debian.org/security/faq -...

DSA-2476-1 pidgin-otr - format string vulnerability

Bulletin has no description...

[SECURITY] Fedora 16 Update: pidgin-otr-3.2.1-1.fc16

This is a Pidgin plugin which implements Off-the-Record OTR Messaging. It is known to work at least under the Linux and Windows versions of Pidgin...

Pidgin OTR < 3.2.1 Format String

The version of Pidgin OTR Off-the-Record installed on the remote Windows host is prior to 3.2.1 and is, therefore, affected by a format string vulnerability that could allow a remote attacker to execute arbitrary code on the affected host. C Tenable Network Security, Inc. include"compat.inc"; if...

Pidgin OTR Plugin Detection

The remote host has the Pidgin OTR Off-the-Record plugin installed. This plugin allows for secure, encrypted communication between parties using the Pidgin instant messaging software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59194; scriptversion"1.8";...

Security fix for the ALT Linux 6 package pidgin version 2.10.4-alt1

May 18, 2012 Alexey Shabalin 2.10.4-alt1 - 2.10.4 - fixed CVE-2012-2214, CVE-2012-2318, CVE-2012-1178, CVE-2011-4939 - drop upstreamed farstream patch...

FreeBSD : pidgin-otr -- format string vulnerability (aa71daaa-9f8c-11e1-bd0a-0082a0c18826)

The authors report : Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The flaw is in pidgin-otr, not in libotr. Other applications...

pidgin-otr -- format string vulnerability

The authors report: Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The flaw is in pidgin-otr, not in libotr. Other applications...

Pidgin 2.x MSN功能拒绝服务漏洞

BUGTRAQ ID: 53400 Pidgin是一款多合一世界主流即时通讯软件集成工具。 Pidgin在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务。 1）SOCKS5代理处理代码libpurple/proxy.c中的错误可被利用引用无效指针或通过发送特制的文件转换请求造成崩溃； 2）在处理带有某些字符或字符编码的消息时，"msnmessageparsepayload"函数libpurple/protocols/msn/msg.c 中的错误可被利用造成崩溃。 0 Pidgin 2.x 厂商补丁： Pidgin ------...

libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests

Pidgin reports: A series of specially crafted file transfer requests can cause clients to reference invalid memory. The user must have accepted one of the file transfer requests...

FreeBSD Ports: libpurple

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 17 Update: pidgin-2.10.2-1.fc17

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Fedora 17 : pidgin-2.10.2-1.fc17 (2012-4650)

version 2.10.2 03/14/2012 View all closed tickets for this release. General: Fix compilation when using binutils 2.22 and new GDK pixbuf. 14799 Fix compilation of the MXit protocol plugin with GLib 2.31. 14773 Pidgin: Add support for the GNOME3 Network dialog. 13882 Fix rare crash. 14392 Add...