257 matches found
GLSA-200905-07 : Pidgin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200905-07 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the 'XMPP SOCKS5 bytestream server' when initiating an outgoing file transfer CVE-2009-1373...
Pidgin memory corruption
Memory corruption on malcrafted filename in MSN protocol. Buffer overflow on Jabber file transfer. Buffer overflow in QQ protocol...
Pidgin: Multiple vulnerabilities
Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2009:1060 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...
pidgin DoS when decrypting qq packets
Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...
Important: Red Hat Security Advisory: pidgin security update
Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...
Pidgin < 2.5.6 Multiple Buffer Overflows
The remote host is running Pidgin earlier than 2.5.6. Such versions are reportedly affected by multiple buffer overflow vulnerabilities : - A buffer overflow is possible when initiating a file transfer to a malicious buddy over XMPP. CVE-2009-1373 - A buffer overflow issue in the 'decryptout'...
IBM DB2 < 9.5 pack 3a Malicious Data Stream Denial of Service Exploit
No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system GUEST account with QQ password shoule be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 500...
QQ client website link filtering is not strict can lead to URL spoofing-vulnerability warning-the black bar safety net
Vulnerability description: QQ is our most used chat tool, QQ Security Center from the 2 0 0 6 The official version of the launch of the website, the link protection function: QQ2006 official version is optimized for unsafe links shield, the tip function, the limit of these phishing sites, malicio...
On Tumblr hung it to the principle-vulnerability warning-the black bar safety net
Today I come to tell you to talk about it on the QQ space hung it works, I tried it, the success rate account for 8 0 percent. There are a lot of people have asked me what can be done in broiler flocks, I think for a long time, but the QQ space to hang horse can achieve this. So I try to do it,...
腾讯QQ LaunchP2PShare远程栈溢出漏洞
BUGTRAQ ID: 26613 腾讯QQ是在中国非常广泛使用的即时聊天工具。 QQ的VQQPLAYER.OCX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QQ的VQQPLAYER.OCX控件没有正确地验证LaunchP2PShare方式（ClassId是AC3A36A8-9BFF-410A-A33D-2279FFEB69D2）： id0x00000030 VARIANTBOOL LaunchP2PShare BSTR szExeName, long nDuration;...
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities / source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied dat...
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities
/ source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...
QQ website login RSA encrypted transmission defect analysis-vulnerability warning-the black bar safety net
! QQ Thanks to anonymous people posting QQ website login not using https is encrypted, instead of using the RSA asymmetric encryption to protect transmission of passwords and sensitive information security. QQ is in javascript to achieve the entire process. This idea is very novel, but is also...
QQ is a common Instant Messenger in east Asia. QQ Instant Messenger allows instant peer-to-peer file transfers, SMS sending and chatting with online friends. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is...
Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net
According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...
QQ also to play the 0day vulnerability(magazine version of the band performing)-vulnerability warning-the black bar safety net
This article in published in the 2 0 0 7 0 9 X-files Please forward Ming fromhttp://www.52cmd.cn QQ also to play 0day vulnerabilities Carved cards/du huajun52cmd. cn Again: when you see this article, TX has been seal up this vulnerability, but we do not lose heart, because there can be a...
QQ 0day-vulnerability warning-the black bar safety net
Put that 3 files to\Tencent\QQ\IMScene\Scene\ Use Notepad to open the VBScript. qqs The bottom has that code. Then in the scene to someone else Download: qq.rar Related information sources: carved brand's blog） About that QQ 0day little information, and now the specific process written out, we lo...
QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net
Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, saving time and effort...
QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net
failwest shineast Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, savi...