Null pointer dereference

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:208)

A security vulnerability has been identified and fixed in pidgin : It has been discovered that eight denial of service conditions exist in libpurple all due to insufficient validation of the return value from purplebase64decode. Invalid or malformed data received in place of a valid base64-encode...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Yahoo! Messenger 10 (PhotoShare.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits ======================================================= Yahoo! Messenger 10 PhotoShare.dll Remote BOF Exploit ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Yahoo Toolbar Internet Explorer 6 Policy Bypass

Yahoo! Toolbar is a toolbar for web browsers and can be installed on the Internet Explorer and Firefox browsers. It allows access to several functions, including Yahoo! Search and Yahoo! Mail. It also contains built-in algorithms to prevent pop-ups and spyware. A policy bypass situation occurs wh...

Onpub web content management Multiple Vulnerabilty

Exploit for php platform in category web applications ================================================== Onpub web content management Multiple Vulnerabilty ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

[SECURITY] Fedora 12 Update: pidgin-2.7.2-1.fc12

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

[SECURITY] Fedora 13 Update: pidgin-2.7.2-1.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Yahoo! messenger (v10.0.0.525-us beta) yt.dll ActiveX Remote Code

Exploit for windows platform in category remote exploits ================================================================================ Yahoo! messenger v10.0.0.525-us beta yt.dll ActiveX Remote Code Execution 0day ================================================================================...

Государственные ресурсы США подвергли DDoS-атаке не корейские хакеры

Как сообщает Associated Press, оглашены предварительные результаты расследования, которое ведут американские специальные службы по делу нарушения работы сайтов госслужб США. Как выяснилось, хакеры из Северной Кореи не участвовали в широкомасштабном DDoS-прессинге, который был нацелен на...

Joomla JC - Top 25 Movie Trailers Cross Site Scripting

=========================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Yahoo! Mail suffered from a cross site scripting vulnerability.

No description provided by source. Author: Pratul Agrawal pratulagatyahoodotcom Indian Hacker Service: Webmail Vendor: Yahoo mail, and possibly others Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: High Tested on: Microsoft IE 7.0 Details: Yahoo mail filter fails t...

Yahoo! Mail Cross Site Scripting

Title: Yahoo mail Dom Based Cross Site Scripting Author: Pratul Agrawal Date: 13/06/2010 Indian Hacker Service: Webmail Vendor: Yahoo mail, and possibly others Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: High Tested on: Microsoft IE 7.0 Details: Yahoo mail filte...

Yahoo! Messenger 8.1.0.249 - ActiveX Control Buffer Overflow (Metasploit)

$Id: yahoomessengerserver.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...