Oracle Solaris Third-Party Patch Update : pidgin (multiple_vulnerabilities_in_pidgin)

The remote Solaris system is missing necessary patches to address security updates : - proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash vi...

PT-2012-3949

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.4 Description The issue is related to the MSN protocol plugin in libpurple, where crafted characters in a text/plain message can cause a denial of service, resulting in an application crash. Recommendations For...