RHEL 4 / 5 : pidgin (RHSA-2009:1139)

Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts...

Pidgin < 2.5.8 OSCAR Protocol DoS Vulnerability - Linux

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin";...

Pidgin OSCAR Protocol Denial Of Service Vulnerability - Windows

Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1139 Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant...

pidgin: DoS via specially-crafted ICQWebMessage

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Moderate: Red Hat Security Advisory: pidgin security and bug fix update

Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts...

pidgin特制ICQ Web消息拒绝服务漏洞

BUGTRAQ ID: 35530 CVECAN ID: CVE-2009-1889 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的实时通讯开放系统（OSCAR）协议实现中存在越界内存访问漏洞。如果远程ICQ用户向使用这个协议的Pidgin用户发送了特制web消息的话，就会导致分配过多的内存，客户端可能会崩溃。 Pidgin 2.5.8 厂商补丁： Pidgin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://developer.pidgin.im/ticket/9483...

pidgin security and bug fix update

2.5.8-1 - 2.5.8 with several important bug fixes 2.5.7-2 - glib2 compat with RHEL-4 2.5.7-1 - 2.5.7 with Yahoo Protocol 16 support 2.5.6-1 - 2.5.6 2.5.5-3 - F12+ removed krb4...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

DEBIAN-CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Design/Logic Flaw

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

CVE-2009-1889 affects Pidgin's OSCAR protocol implementation. A remote ICQ web message can be misinterpreted (ICQWebMessage vs ICQSMS), triggering large memory allocation and causing a denial of service (Pidgin crash). Documents consistently describe this DoS via crafted ICQ web messages and note...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:147)

Security vulnerabilities has been identified and fixed in pidgin : Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these detail...

CVE-2009-1889: Undefined Security Weakness

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

Mandrake Security Advisory MDVSA-2009:140 (gaim)

The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:140 (gaim)

The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. OpenVAS Vulnerability Test $Id: mdksa2009140.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:140 gaim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...