CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

DEBIAN-CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

DEBIAN-CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

Design/Logic Flaw

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

Code injection

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

CVE-2009-3025

CVE-2009-3025 affects Pidgin 2.6.0 and is described as a remote denial-of-service in the Yahoo IM plug-in, with multiple vendor advisories noting a Yahoo IM-related crash vulnerability. Public documents corroborate that this issue is addressed by pidgin updates (e.g., openSUSE/SUSE advisories fin...

CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

CVE-2009-3026

CVE-2009-3026 concerns Pidgin (libpurple) up to version 2.6.0, where the XMPP/Jabber client may ignore the SSL/TLS requirement when connecting to very old Jabber servers. This behavior can establish a non‑encrypted session, enabling a remote attacker to sniff user conversations as described in th...

Pidgin MSN SLP Packets Denial Of Service Vulnerability (Windows)

This host has Pidgin installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginmsnslpdosvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Pidgin MSN SLP Packets Denial Of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 SecPod...

Pidgin MSN SLP Packets Denial Of Service Vulnerability - Windows

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin < 2.5.9 MSN SLP Packets DoS Vulnerability - Linux

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin";...

Fedora 10 : pidgin-2.6.0-1.fc10 (2009-8791)

pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msnslplinkprocessmsg and numerous other bug fixes. Fedora 10 does not support voice and video with pidgin-2.6.0. Upgrade to Fedora 11 for this capability. Note that Tenable Network Security has extracted the preceding...

Fedora 10 : pidgin-2.6.1-1.fc10 (2009-8826)

2.6.1 fixes an issue where pidgin can crash if you are sent a certain type of URL over Yahoo. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : pidgin-2.6.1-1.fc11 (2009-8874)

2.6.1 fixes an issue where pidgin can crash if you are sent a certain type of URL over Yahoo. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerability (USN-820-1)

Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding...

FreeBSD : pidgin -- MSN overflow parsing SLP messages (59e7af2d-8db7-11de-883b-001e3300a30d)

Secunia reports : A vulnerability has been reported in Pidgin, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error in the 'msnslplinkprocessmsg' function when processing MSN SLP messages and can be exploited to corrupt...