2542 matches found
CVE-2010-3711: Improper Input Validation
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...
libpurple library / Pidgin DoS
Crash on base64 decoding in different protocols...
[ MDVSA-2010:208 ] pidgin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:208 http://www.mandriva.com/security/ Package : pidgin Date : October 21, 2010 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A security vulnerability has been identified and...
Subject: BSA-008 Security Update for pidgin
Jan Wagner uploaded new packages for pidgin which fixed the following security problems: CVE-2010-3711 Fixes multiple remotely-triggered DoSes https://vulners.com/cve/CVE-2010-3711 For the lenny-backports distribution the problems have been fixed in version 2.7.3-1bpo50+2. For the unstable sid...
Subject: BSA-008 Security Update for pidgin
Jan Wagner uploaded new packages for pidgin which fixed the following security problems: CVE-2010-3711 Fixes multiple remotely-triggered DoSes https://vulners.com/cve/CVE-2010-3711 For the lenny-backports distribution the problems have been fixed in version 2.7.3-1bpo50+2. For the unstable sid...
RHEL 4 / 5 : pidgin (RHSA-2010:0788)
Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
RedHat Update for pidgin RHSA-2010:0788-01
Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0788-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for pidgin RHSA-2010:0788-01
Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0788-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mandriva Update for pidgin MDVSA-2010:208 (pidgin)
Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:208 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:208)
A security vulnerability has been identified and fixed in pidgin : It has been discovered that eight denial of service conditions exist in libpurple all due to insufficient validation of the return value from purplebase64decode. Invalid or malformed data received in place of a valid base64-encode...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2010:0788 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...
Moderate: Red Hat Security Advisory: pidgin security update
Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
Pidgin: MSN SLP emoticon DoS (NULL pointer dereference)
The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...
PT-2010-5020
Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.7.4 Description The issue is related to the improper validation of the return value of the purple base64 decode function in libpurple, which can be exploited by remote authenticated users to cause a denial of service...
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt1
Oct. 21, 2010 Slava Semushin 2.7.4-alt1 - Updated to 2.7.4 + CVE-2010-3711: eight DoS conditions in libpurple...
pidgin security update
2.6.6-5 - Add patch for CVE-2010-1624 RH bug 644153. 2.6.6-4 - Initial patch for CVE-2010-3711 was incomplete. Here's the rest. 2.6.6-3 - Add patch for CVE-2010-3711 RH bug 644153...
CVE-2010-3088
The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...
Code injection
The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...
CVE-2010-3088
Summary: CVE-2010-3088 affects the pidgin-knotify plugin for Pidgin, versions 0.2.1 and earlier. The root cause is improper sanitization of shell metacharacters in received messages within the notify function (pidgin-knotify.c). Impact: remote attackers could cause arbitrary code execution with t...
