CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

DEBIAN-CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

Design/Logic Flaw

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

Null pointer dereference

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2012-1178

CVE-2012-1178 affects Pidgin/libpurple MSN protocol plugin (oim.c: msn_oim_report_to_user). A remote server can crash the client by sending an OIM message that is not UTF-8 encoded, leading to a denial of service. Affected: Pidgin up to version prior to 2.10.2 (PIDGIN/ libpurple with MSN plugin)....

CVE-2011-4939

CVE-2011-4939 affects Pidgin prior to 2.10.2, where the pidgin_conv_chat_rename_user function in gtkconv.c can trigger a NULL pointer dereference in an XMPP chat room when nicknames are changed, leading to a denial of service (application crash). Public details in the provided connected documents...

CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

Pidgin 2.x 多个拒绝服务漏洞

Pidgin是一款多协议即时通信软件 Pidgin存在多个安全漏洞，允许攻击者进行拒绝服务攻击 -处理XMPP聊天室中的昵称更改时"getiterfromchatbuddy"函数pidgin/gtkconv.c存在空指针引用错误，可被利用进行拒绝服务攻击 -处理UTF-8编码消息时"msnoimreporttouser"函数libpurple/protocols/msn/oim.c存在错误，可被利用进行拒绝服务攻击 0 Pidgin 2.x 厂商解决方案 Pidgin 2.10.2已经修复此漏洞，建议用户下载使用： http://www.pidgin.im...

Security fix for the ALT Linux 6 package pidgin version 2.10.1-alt0.M60P.1

March 13, 2012 Gleb Fotengauer-Malinovskiy 2.10.1-alt0.M60P.1 - p6 security update fix CVE-2011-3594 CVE-2011-4601 CVE-2011-4602 CVE-2011-4603...

Security fix for the ALT Linux 5 package pidgin version 2.10.1-alt0.M50P.1

March 13, 2012 Gleb Fotengauer-Malinovskiy 2.10.1-alt0.M50P.1 - p5 security update fix CVE-2011-3594 CVE-2011-4601 CVE-2011-4602 CVE-2011-4603...

libpurple 2.8.10 - OTR Information Disclosure

libpurple 2.8.10 - OTR Information Disclosure source: https://www.securityfocus.com/bid/52175/info libpurple is prone to an information-disclosure vulnerability. Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. The following produc...

libpurple 2.8.10 - OTR Information Disclosure

source: https://www.securityfocus.com/bid/52175/info libpurple is prone to an information-disclosure vulnerability. Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. The following products are vulnerable: libpurple versions prior to...

Solaris 10 (sparc) : 147992-10 (deprecated)

SunOS 5.10: Pidgin patch. Date this patch was last updated by Sun : Apr/17/17 This plugin has been deprecated and either replaced with individual 147992 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Security fix for the ALT Linux 5 package pidgin version 2.10.1-alt1

Jan. 10, 2012 Alexey Shabalin 2.10.1-alt1 - 2.10.1 fixed CVE-2011-3594,CVE-2011-4601,CVE-2011-4602,CVE-2011-4603...

Security fix for the ALT Linux 6 package pidgin version 2.10.1-alt1

Jan. 10, 2012 Alexey Shabalin 2.10.1-alt1 - 2.10.1 fixed CVE-2011-3594,CVE-2011-4601,CVE-2011-4602,CVE-2011-4603...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 7901)

Remote users could have crashed crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.1 Security Update : pidgin (SAT Patch Number 5586)

Remote users could have crashed pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...