CVE-2010-2528

The CVE-2010-2528 issue affects Pidgin (libpurple) using the Oscar protocol plugin. Vulnerable component: clientautoresp function in family_icbm.c, prior to Pidgin 2.7.2. Root cause: X-Status messages lacking the end tag for a desc or title element are not handled correctly, enabling a remote aut...

CVE-2010-2528

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

CVE-2010-2528

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

[SECURITY] Fedora 13 Update: pidgin-2.7.2-1.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Fedora 13 : pidgin-2.7.2-1.fc13 (2010-11321)

New release to address a security issue and a couple of bugfixes Details at http://developer.pidgin.im/wiki/ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.2-alt1

July 24, 2010 Slava Semushin 2.7.2-alt1 - Updated to 2.7.2 + CVE-2010-2528: crash bug that can be triggered by remote users...

Pidgin X-Status NULL Pointer Denial of Service

The version of Pidgin installed on the remote host is earlier than 2.7.2. Such versions have a denial of service vulnerability when processing a malformed X-Status message due to a reference to a NULL pointer in the oscar protocol plugin. C Tenable Network Security, Inc. include"compat.inc"; if...

Fedora 12 : pidgin-2.6.6-1.fc12 (2010-1383)

2.6.6 with security and numerous minor bug fixes CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : pidgin-2.6.5-1.fc11 (2010-0429)

CVE-2010-0013 - A few other bug fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 12 : pidgin-2.6.5-1.fc12 (2010-0368)

CVE-2010-0013 - A few other bug fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 13 : pidgin-2.7.0-2.fc13 (2010-8503)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 11 : pidgin-2.7.0-2.fc11 (2010-8523)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 12 : pidgin-2.7.0-2.fc12 (2010-8524)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 11 : pidgin-2.6.6-1.fc11 (2010-1279)

2.6.6 with security and numerous minor bug fixes CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : pidgin-2.6.6-1.fc13 (2010-1934)

2.6.6 with security and numerous minor bug fixes CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1

June 13, 2010 Slava Semushin 2.7.1-alt1 - Updated to 2.7.1 + CVE-2010-0013: MSN local file disclosure vulnerability + CVE-2010-0277: remote MSN SLP crash + CVE-2010-0420: remote Finch XMPP crash + CVE-2010-0423: remote smiley freeze/CPU pegging DoS + CVE-2010-1624: MSN emoticon DoS - Added...

Mandriva Update for pidgin MDVA-2010:164 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVA-2010:164 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for pidgin MDVA-2010:164 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVA-2010:164 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Debian: Security Advisory (DSA-2038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2038-2 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 2038-2. OpenVAS Vulnerability Test $Id: deb20382.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2038-2 pidgin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...