CVE-2012-2318

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

PT-2012-3949

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.4 Description The issue is related to the MSN protocol plugin in libpurple, where crafted characters in a text/plain message can cause a denial of service, resulting in an application crash. Recommendations For...

CVE-2012-2318: Improper Input Validation

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

CVE-2012-2318

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

PT-2012-3887

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.4 Description The issue arises from improper handling of canceled SOCKS5 connection attempts in proxy.c in libpurple, allowing user-assisted remote authenticated users to cause a denial of service, resulting in an...

CVE-2012-2214: Undefined Security Weakness

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

Security fix for the ALT Linux 6 package pidgin version 2.10.4-alt0.M60P.1

June 28, 2012 Gleb Fotengauer-Malinovskiy 2.10.4-alt0.M60P.1 - p6 security update fix CVE-2012-2214 CVE-2012-2318 CVE-2012-1178 CVE-2011-4939...

SuSE 10 Security Update : finch, libpurple, and pidgin (ZYPP Patch Number 8131)

Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...

GLSA-201206-11 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-11 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities allow for arbitrary file retrieval,...

Fedora Update for pidgin FEDORA-2012-8686

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 15 : pidgin-2.10.4-1.fc15 (2012-8669)

Fix for CVE-2012-2214 and CVE-2012-2318. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 16 : pidgin-2.10.4-1.fc16 (2012-8686)

Fix for CVE-2012-2214 and CVE-2012-2318. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Update for pidgin FEDORA-2012-8686

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: pidgin-2.10.4-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 16 Update: pidgin-2.10.4-1.fc16

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

RedHat Update for pidgin RHSA-2011:0616-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2011:0616-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for pidgin RHSA-2011:0616-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Pidgin <2.10.4 XMPP协议文件传输请求处理远程拒绝服务漏洞

BUGTRAQ ID: 53706 CVE ID: CVE-2012-2214 Pidgin是一款多合一世界主流即时通讯软件集成工具。 Pidgin 2.10.4之前版本在处理一系列特制的文件传输请求时刻造成客户端引用无效内存，用户接受了其中一个文件传输请求后，可造成受影响应用崩溃。 0 Pidgin 2.10.4 厂商补丁： Pidgin ------ Pidgin已经为此发布了一个安全公告（CVE-2012-2214）以及相应补丁: CVE-2012-2214：XMPP remote crash 链接：http://www.pidgin.im/news/security/?id=62...

Fedora 17 : pidgin-2.10.4-1.fc17 (2012-8687)

Fix for CVE-2012-2214 and CVE-2012-2318. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...