Security fix for the ALT Linux 6 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Pidgin < 2.9.0 gdk_pixbuf__gif_image_load() Denial of Service

The version of Pidgin installed on the remote host is earlier than 2.9.0. As such, it is potentially affected by a denial of service vulnerability. The function 'gdkpixbufgifimageload' contains an error that allows a crafted GIF image file, when used as a buddy image, to cause memory exhaustion a...

Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt1

June 27, 2011 Slava Semushin 2.9.0-alt1 - Updated to 2.9.0 + CVE-2011-2485: remote denial of service from corrupt buddy icons...

pidgin security and bug fix update

2.7.9-3.el6 - Add patch for RH bug 684685 zero-out crypto keys before freeing. 2.7.9-2.el6 - Add patch for CVE-2011-1091 RH bug 683031. 2.7.9-1.el6 - Update to 2.7.9 RH bug 616917. - Remove patches now included upstream: pidgin-2.6.6-clientLogin-proxy-fix.patch...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : pidgin (SSA:2010-305-02)

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-305-02. The text...

RHEL 6 : pidgin (RHSA-2011:0616)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0616 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple...

Low: Red Hat Security Advisory: pidgin security and bug fix update

Updated pidgin packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

Cipher API information disclosure in pidgin

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents...

openSUSE Security Update : finch (openSUSE-SU-2011:0021-1)

A NULL pointer dereference DoS has been fixed in pidgin. CVE-2010-4528 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-3783. The text description of this...

Multi Gather Pidgin Instant Messenger Credential Collection

This module will collect credentials from the Pidgin IM client if it is installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Multi Gather Pidgin Instant Messenger...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.11-alt0.M50P.1

March 31, 2011 Gleb Fotengauer-Malinovskiy 2.7.11-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-1091...

Security fix for the ALT Linux 5 package pidgin version 2.7.11-alt0.M50P.1

March 30, 2011 Gleb Fotengauer-Malinovskiy 2.7.11-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-1091...

Fedora Update for pidgin FEDORA-2011-3132

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2011-3132 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for pidgin FEDORA-2011-3113

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2011-3113 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for pidgin MDVSA-2011:050 (pidgin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pidgin FEDORA-2011-3132

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pidgin FEDORA-2011-3113

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Pidgin Yahoo Protocol 'YMSG' NULL Pointer Dereference Denial of Service Vulnerability (Windows)

This host has installed with Pidgin and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbpidginymsgdosvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Pidgin Yahoo Protocol 'YMSG' NULL Pointer Dereference Denial of Service Vulnerability Windows Authors: Madhuri D...

Mandriva Linux Security Advisory : pidgin (MDVSA-2011:050)

Multiple vulnerabilities has been identified and fixed in pidgin : It was discovered that libpurple versions prior to 2.7.10 do not properly clear certain data structures used in libpurple/cipher.c prior to freeing. An attacker could potentially extract partial information from memory regions fre...