Lucene search
+L

2432 matches found

Veracode
Veracode
•added 2019/05/02 5:01 a.m.•25 views

Buffer Over-Read

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A heap-based buffer overflow flaw was found in the way Pidgin processed certain HTTP responses. A malicious server could send a specially crafted HTTP response,...

10CVSS6.5AI score0.14809EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•24 views

Denial Of Service (DoS)

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A heap-based buffer overflow flaw was found in the way Pidgin processed certain HTTP responses. A malicious server could send a specially crafted HTTP response,...

10CVSS6.5AI score0.14809EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•33 views

Integer Overflow

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A heap-based buffer overflow flaw was found in the way Pidgin processed certain HTTP responses. A malicious server could send a specially crafted HTTP response,...

10CVSS6.5AI score0.14809EPSS
SaveExploits0References18Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•34 views

Out-Of-Bounds Write

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A heap-based buffer overflow flaw was found in the way Pidgin processed certain HTTP responses. A malicious server could send a specially crafted HTTP response,...

10CVSS6.5AI score0.14809EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•28 views

Denial Of Service (DoS)

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A heap-based buffer overflow flaw was found in the way Pidgin processed certain HTTP responses. A malicious server could send a specially crafted HTTP response,...

10CVSS6.5AI score0.14809EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2019/05/02 4:44 a.m.•26 views

Denial Of Service (DoS)

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A stack-based buffer overflow flaw was found in the Pidgin MXit protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by...

6.8CVSS6.4AI score0.0286EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2019/05/02 4:44 a.m.•30 views

Denial Of Service (DoS)

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A stack-based buffer overflow flaw was found in the Pidgin MXit protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by...

6.8CVSS6.4AI score0.0286EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2019/05/02 4:42 a.m.•44 views

Arbitrary Code Execution

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by...

7.5CVSS6.3AI score0.06402EPSS
SaveExploits3References9Affected Software1
Veracode
Veracode
•added 2019/05/02 4:42 a.m.•37 views

Denial Of Service (DoS)

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by...

7.5CVSS6.3AI score0.06402EPSS
SaveExploits3References10Affected Software1
Fedora
Fedora
•added 2019/04/05 1:56 a.m.•51 views

[SECURITY] Fedora 28 Update: pidgin-sipe-1.24.0-3.fc28

A third-party plugin for the Pidgin multi-protocol instant messenger. It implements the extended version of SIP/SIMPLE used by various products: Skype for Business Microsoft Office 365 Microsoft Business Productivity Online Suite BPOS Microsoft Lync Server Microsoft Office Communications Server O...

9.8CVSS7AI score0.08156EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2019/04/05 12:00 a.m.•28 views

Fedora Update for pidgin-sipe FEDORA-2019-b2d986c3e9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/03/04 12:00 a.m.•39 views

Fedora 29 : 2:freerdp / gnome-boxes / pidgin-sipe / remmina (2019-e3b2885a25)

FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

9.8CVSS6.9AI score0.08156EPSS
SaveExploits2References3
Fedora
Fedora
•added 2019/03/02 1:50 a.m.•32 views

[SECURITY] Fedora 29 Update: pidgin-sipe-1.24.0-3.fc29

A third-party plugin for the Pidgin multi-protocol instant messenger. It implements the extended version of SIP/SIMPLE used by various products: Skype for Business Microsoft Office 365 Microsoft Business Productivity Online Suite BPOS Microsoft Lync Server Microsoft Office Communications Server O...

9.8CVSS7AI score0.08156EPSS
SaveExploits2
Veracode
Veracode
•added 2019/01/15 9:00 a.m.•35 views

Arbitrary Code Execution

pidgin is vulnerable to arbitrary code execution attacks. The vulnerability exists through a buffer overflow issue in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header...

6.8CVSS7.6AI score0.0286EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
•added 2019/01/15 8:56 a.m.•33 views

Denial Of Service (DoS)

pidgin is vulnerable to denial of service DoS attacks. The vulnerability exists as the Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service application crash via crafted byte sequences...

5CVSS5.7AI score0.0379EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2019/01/15 8:54 a.m.•35 views

Denial Of Service (DoS)

pidgin is vulnerable to denial of service DoS attacks. The vulnerability exists as the msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8...

5CVSS5.7AI score0.02476EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2018/09/05 5:29 p.m.•17 views

CVE-2016-1000030

Pidgin version 2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutlsx509crtinit and gnutlsx509crtimport that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client...

9.8CVSS7.1AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2018/09/05 5:29 p.m.•27 views

CVE-2016-1000030

Pidgin version 2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutlsx509crtinit and gnutlsx509crtimport that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client...

9.8CVSS7.2AI score0.01844EPSS
SaveExploits0References2
OSV
OSV
•added 2018/09/05 5:29 p.m.•9 views

DEBIAN-CVE-2016-1000030

Pidgin version 2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutlsx509crtinit and gnutlsx509crtimport that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client...

9.8CVSS7.6AI score0.01844EPSS
SaveExploits0References1
Prion
Prion
•added 2018/09/05 5:29 p.m.•17 views

Design/Logic Flaw

Pidgin version 2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutlsx509crtinit and gnutlsx509crtimport that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client...

7.5CVSS7.4AI score0.01844EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder