Lucene search
RootSSV:60264HistoryJul 09, 2012 - 12:00 a.m.
Pidgin 'mxit_show_message()'基于栈的缓冲区溢出漏洞
2012-07-0900:00:00
Root
www.seebug.org
7
0.26 Low
EPSS
Percentile
96.2%
Bugtraq ID:54322
CVE ID:CVE-2012-3374
Pidgin是一款多协议即时通信软件
如果进入的消息包含内联图像，"mxit_show_message()"函数(libpurple/protocols/mxit/markup.c)解析时存在一个边界错误，允许攻击者构建特制的RX消息触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码
0
Pidgin 2.x
厂商解决方案
Pidgin 2.10.5已经修复此漏洞，建议用户下载使用：
http://www.pidgin.im/news/security/index.php?id=64
Related
nessus
nessus
Debian DSA-2509-1 : pidgin - remote code execution
2012-07-09 00:00:00
Fedora 16 : pidgin-2.10.5-1.fc16 (2012-10294)
2012-07-16 00:00:00
suse
suse
Security update for pidgin, finch and libpurple (important)
2012-07-19 01:08:42
openvas
openvas
Debian Security Advisory DSA 2509-1 (pidgin)
2012-08-10 00:00:00
Pidgin MXit Message Parsing Buffer Overflow Vulnerability (Windows)
2012-10-19 00:00:00
Gentoo Security Advisory GLSA 201209-17 (pidgin)
2012-10-03 00:00:00
gentoo
gentoo
Pidgin: Arbitrary code execution
2012-09-27 00:00:00
slackware
slackware
[slackware-security] pidgin
2012-07-14 18:49:01
cve
cve
CVE-2012-3374
2012-07-07 10:21:00
osv
osv
pidgin - remote code execution
2012-07-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package pidgin version 2.10.6-alt1
2012-07-30 00:00:00
Security fix for the ALT Linux 6 package pidgin version 2.10.6-alt1.M60P.1
2012-10-25 00:00:00
securityvulns
securityvulns
libpurple / Pidgin code execution
2012-07-11 00:00:00
[SECURITY] [DSA 2509-1] pidgin security update
2012-07-11 00:00:00
ubuntucve
ubuntucve
CVE-2012-3374
2012-07-08 00:00:00
prion
prion
Buffer overflow
2012-07-07 10:21:00
debian
debian
[SECURITY] [DSA 2509-1] pidgin security update
2012-07-08 19:49:39
debiancve
debiancve
CVE-2012-3374
2012-07-07 10:21:00
redhat
redhat
(RHSA-2012:1102) Moderate: pidgin security update
2012-07-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:35
Arbitrary Code Execution
2019-05-02 04:42:35
fedora
fedora
[SECURITY] Fedora 17 Update: pidgin-2.10.5-1.fc17
2012-07-10 16:23:55
[SECURITY] Fedora 16 Update: pidgin-2.10.5-1.fc16
2012-07-14 22:01:31
centos
centos
finch, libpurple, pidgin security update
2012-07-19 16:46:55
oraclelinux
oraclelinux
pidgin security update
2012-07-19 00:00:00
pidgin security update
2013-03-14 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2012-07-09 00:00:00