UBUNTU-CVE-2014-3698

The jabberidnvalidate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message...

PT-2014-5456

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue allows remote servers to cause a denial of service, resulting in an application crash, by sending a large length value in an emoticon response. This is related to the markup.c file in the...

PT-2014-5459

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message. This is due to a problem in the jabber idn validate function in jutil.c in the Jabbe...

PT-2014-5455

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue arises from the improper consideration of the Basic Constraints extension during the verification of X.509 certificates from SSL servers by the bundled GnuTLS and OpenSSL SSL/TLS plugins i...

PT-2014-5458

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue is related to an absolute path traversal vulnerability in the untar block function. This vulnerability allows remote attackers to write to arbitrary files via a drive name in a tar archive...

PT-2014-5457

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue allows remote servers to cause a denial of service, resulting in an application crash, by sending a crafted server message that triggers a large memory allocation. This occurs due to a...

KLA10448 Multiple Pidgin vulnerabilities

Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information and write local files. Below is a complete list of vulnerabilities 1. Vectors related to Jabber protocol can be exploited remotely...

libpurple/pidgin -- multiple vulnerabilities

The pidgin development team reports:...

Debian: Security Advisory (DSA-3055-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tails 1.2 - Privacy for anyone anywhere

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...

Updated pidgin packages fix CVE-2014-3775

Updated pidgin packages fix security vulnerability: It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or...

MGASA-2014-0295 Updated pidgin packages fix CVE-2014-3775

Updated pidgin packages fix security vulnerability: It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or...

Pidgin MSN <= 2.5.8 - Remote Code Execution Exploit

No description provided by source. / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library libmsn us...

Pidgin MSN <= 2.6.4 File Download Vulnerability

No description provided by source. !/usr/bin/env python Pidgin MSN = 2.6.4 file download vulnerability 19 January 2010 Mathieu GASPARD [email protected] Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by Fabian Yamaguchi. T...

openSUSE Security Update : finch (openSUSE-SU-2012:0066-1)

Remote users could crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601, CVE-2011-4603, CVE-2011-4602, CVE-2011-1091. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5557...

openSUSE Security Update : pidgin (openSUSE-SU-2013:0511-1)

Pidgin was updated to 2.10.7 to fix various security issues and the bug that IRC did not work at all in 12.3. Changes : - Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the IRC module to be loaded bnc806975. - Update to version 2.10.7 bnc804742 : + Alien hatchery : - No changes +...

openSUSE Security Update : pidgin (openSUSE-2012-29)

pidgin was updated to version 2.10.1 + AIM and ICQ : - Fix remotely-triggerable crashes by validating strings in a few messages related to buddy list management bnc736147, CVE-2011-4601. + Bonjour : - IPv6 fixes + Gadu-Gadu : - Fix problems linking against GnuTLS. + IRC : - Fix a memory leak when...

openSUSE Security Update : finch (openSUSE-SU-2011:0021-1)

A NULL pointer dereference DoS has been fixed in pidgin. CVE-2010-4528 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-3783. The text description of this...

openSUSE Security Update : pidgin-otr (openSUSE-SU-2012:0717-1)

pidgin-otr was prone to a format string flaw in logmessagecb %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-314. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : pidgin (openSUSE-SU-2012:0866-1)

Changes in pidgin : - bnc761155, CVE-2012-2318, remote crash via specially crafted MSN notification message %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-384. The text...