[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...

腾讯QQ 2010 SP1消息记录远程代码注入漏洞

腾讯QQ是一款在中国非常广泛使用的即时聊天工具。 腾讯QQ 2010 SP1在处理消息记录时，没有对会话消息中的Javascript和Html标签进行正确转义，攻击者可以发送恶意消息注入脚本代码并执行。 Tencent QQ 2010 SP1 最新版本的腾讯QQ已经修复此漏洞，建议用户下载使用： http://im.qq.com/qq/dlqq.shtml input onclick="window.location=' x68x74x74x70x3ax2fx2fx77x77x77x2ex62x6fx77x6fx73x2ex63x6fx6d'"/ img src='tetet'...

QQ电脑管家TSKsp.sys驱动本地拒绝服务漏洞

QQ电脑管家是QQ医生3.3的升级版本，主要功能包括安全防护、系统优化和软件管理。 QQ电脑管家所安装的TSKsp.sys驱动没有正确地验证用户所提交的调用参数，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 Tencent QQ电脑管家 4.0 Beta1 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://pcmgr.qq.com/ !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of...

QQ Computer Manager TSKsp.sys Driver Denial Of Service

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQ Computer Manager TSKsp.sys Local Denial of Service Exploit

No description provided by source. !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform: Windows XPSP3 Chinese...

QQ Computer Manager TSKsp.sys Local Denial of Service Exploit

Exploit for windows platform in category dos / poc ============================================================= QQ Computer Manager TSKsp.sys Local Denial of Service Exploit ============================================================= !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local...

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQ Computer Manager - TSKsp.sys Local Denial of Service

QQ Computer Manager - TSKsp.sys Local Denial of Service !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform:...

QQ Computer Manager - 'TSKsp.sys' Local Denial of Service

!/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform: Windows XPSP3 Chinese Simplified Tested: QQpcmgr v4.0Beta1...

QQ Computer Manager DoS

Crash on IOCTL processing...

[SECURITY] Fedora 13 Update: pidgin-2.7.2-1.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 13 Update: pidgin-2.7.0-2.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 11 Update: pidgin-2.7.0-2.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

QQ旋风下载链接处理缓冲区溢出漏洞

BUGTRAQ ID: 39962 QQ旋风是腾讯公司08年底推出的新一代互联网下载工具。 QQ旋风在处理下载链接时存在栈缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户访问构造的恶意网页在用户系统上执行任意指令，从而完全控制用户系统。该漏洞可能被用来大规模传播病毒木马。 Tencent QQ旋风 = 2.7625 厂商补丁： Tencent ------- 目前厂商已经在2.7626及以后版本的软件中修复了此漏洞，请到厂商的主页下载： http://xf.qq.com/...

Tencent QQ Doctor <= 3.2 ZwSetInformationFile Filter Kernel Mode D.O.S Vulnerability

Tencent QQ Doctor Kernel Mode Driver direct using ZwSetInformationFileFileDispostionInformation-FileInformation without any memory validate . 1.03.2 unistall QQ Doctor HMODULE hlib = GetModuleHandle"ntdll.dll"; PVOID pZwSetInformationFile = GetProcAddresshlib , "ZwSetInformationFile"; asm push 0x...

Another to bypass the firewall method-vulnerability warning-the black bar safety net

Using the Http channel software can break through the firewall restrictions, the use of only Http access permissions access to other Internet applications. So what is the channel? Here the so-called channel refers to a method to bypass the firewall port shield means of communication. The firewall...

迅雷5 XPPlayer Activex控件远程代码执行0day漏洞

Xunlei 是一款在线加速下载程序。更多详细信息请参考： http://www.xunlei.com F3E70CEA-956E-49CC-B444-73AFE593AD7F Xunlei 提供的XPPlayer ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于DapFileSize，VodUrl等方法处理中，由于对参数缺少充分过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意指令。 Xunlei5.9.14.1246以下所有版本 使用网际快车或QQ旋风代替迅雷下载 www.xunlei.com...

openSUSE Security Update : finch (finch-1625)

This update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0...

openSUSE Security Update : finch (finch-1625)

This update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0...