Memory corruption

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

CVE-2009-1374

Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...

Buffer overflow

Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...

CVE-2009-1375

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

CVE-2009-1374

Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...

CVE-2009-1374

Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...

CVE-2009-1375

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

CVE-2009-1375

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

CVE-2009-1374

Pidgin (formerly Gaim) is affected by CVE-2009-1374 due to a buffer overflow in the decrypt_out function when processing QQ packets, which can cause the application to crash (DoS). Several connected advisories note this as part of a set of fixes for Pidgin in 2009 across multiple distributions (e...

CVE-2009-1375

CVE-2009-1375 concerns the PurpleCircBuffer expansion in Pidgin (formerly Gaim) up to 2.5.6. When the buffer is full, data can be corrupted, potentially causing a crash or misleading UI. Connected advisories indicate pidgin updates (e.g., to version 2.6.x) fix this and related issues (XMPP/Sameti...

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

CVE-2009-1373

CVE-2009-1373 describes a buffer overflow in Pidgin (formerly Gaim)’s XMPP SOCKS5 bytestream handling when initiating file transfers, exploitable by remote authenticated users to execute arbitrary code. Public advisories (RHSA-2009:1059/1060, OpenSUSE/SUSE/SUSE Finches) confirm the flaw in Pidgin...

CVE-2009-1376

The CVE-2009-1376 issue is a Libpurple/Pidgin memory corruption vulnerability: multiple integer overflows in msn_slplink_process_msg() (MSN protocol) and related slplink code on 32-bit platforms allow remote attackers to cause buffer overflows and potentially execute arbitrary code. The flaw stem...

pidgin security update

2.5.5-2 - Security/DoS fixes from 2.5.6 CVE-2009-1373-8331e31a CVE-2009-1374-ad057b75 2c9a1153 CVE-2009-1375-7829ec76 CVE-2009-1376-9dd1c4c3...

GLSA-200905-07 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200905-07 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the 'XMPP SOCKS5 bytestream server' when initiating an outgoing file transfer CVE-2009-1373...

Pidgin memory corruption

Memory corruption on malcrafted filename in MSN protocol. Buffer overflow on Jabber file transfer. Buffer overflow in QQ protocol...

[ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200905-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...