Pidgin vulnerabilities

2013-02-2500:00:00

ubuntu.com

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04

Packages

pidgin - graphical multi-protocol instant messaging client for X

Details

Chris Wysopal discovered that Pidgin incorrectly handled file transfers in
the MXit protocol handler. A remote attacker could use this issue to create
or overwrite arbitrary files. This issue only affected Ubuntu 11.10,
Ubuntu 12.04 LTS and Ubuntu 12.10. (CVE-2013-0271)

It was discovered that Pidgin incorrectly handled long HTTP headers in the
MXit protocol handler. A malicious remote server could use this issue to
execute arbitrary code. (CVE-2013-0272)

It was discovered that Pidgin incorrectly handled long user IDs in the
Sametime protocol handler. A malicious remote server could use this issue
to cause Pidgin to crash, resulting in a denial of service. (CVE-2013-0273)

It was discovered that Pidgin incorrectly handled long strings when
processing UPnP responses. A remote attacker could use this issue to cause
Pidgin to crash, resulting in a denial of service. (CVE-2013-0274)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchpidgin< 1:2.10.6-0ubuntu2.2UNKNOWN
Ubuntu12.10noarchfinch< 1:2.10.6-0ubuntu2.2UNKNOWN
Ubuntu12.10noarchlibpurple0< 1:2.10.6-0ubuntu2.2UNKNOWN
Ubuntu12.10noarchpidgin-dbg< 1:2.10.6-0ubuntu2.2UNKNOWN
Ubuntu12.04noarchpidgin< 1:2.10.3-0ubuntu1.3UNKNOWN
Ubuntu12.04noarchfinch< 1:2.10.3-0ubuntu1.3UNKNOWN
Ubuntu12.04noarchlibpurple0< 1:2.10.3-0ubuntu1.3UNKNOWN
Ubuntu12.04noarchpidgin-dbg< 1:2.10.3-0ubuntu1.3UNKNOWN
Ubuntu11.10noarchpidgin< 1:2.10.0-0ubuntu2.2UNKNOWN
Ubuntu11.10noarchfinch< 1:2.10.0-0ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	pidgin	< 1:2.10.6-0ubuntu2.2	UNKNOWN
Ubuntu	12.10	noarch	finch	< 1:2.10.6-0ubuntu2.2	UNKNOWN
Ubuntu	12.10	noarch	libpurple0	< 1:2.10.6-0ubuntu2.2	UNKNOWN
Ubuntu	12.10	noarch	pidgin-dbg	< 1:2.10.6-0ubuntu2.2	UNKNOWN
Ubuntu	12.04	noarch	pidgin	< 1:2.10.3-0ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	finch	< 1:2.10.3-0ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	libpurple0	< 1:2.10.3-0ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	pidgin-dbg	< 1:2.10.3-0ubuntu1.3	UNKNOWN
Ubuntu	11.10	noarch	pidgin	< 1:2.10.0-0ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	finch	< 1:2.10.0-0ubuntu2.2	UNKNOWN