Test Kennung:	1.3.6.1.4.1.25623.1.0.67424
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2010:097 (pidgin)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to pidgin announced via advisory MDVSA-2010:097. A security vulnerability has been identified and fixed in pidgin: The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service (application crash) via a custom emoticon in a malformed SLP message (CVE-2010-1624). Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue. Affected: 2008.0, 2009.0, 2009.1, 2010.0, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2010:097 http://pidgin.im/news/security/ Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1624 39801 http://secunia.com/advisories/39801 40138 http://www.securityfocus.com/bid/40138 41899 http://secunia.com/advisories/41899 ADV-2010-1141 http://www.vupen.com/english/advisories/2010/1141 ADV-2010-2755 http://www.vupen.com/english/advisories/2010/2755 MDVSA-2010:097 http://www.mandriva.com/security/advisories?name=MDVSA-2010:097 RHSA-2010:0788 http://www.redhat.com/support/errata/RHSA-2010-0788.html USN-1014-1 http://www.ubuntu.com/usn/USN-1014-1 http://developer.pidgin.im/viewmtn/revision/diff/884d44222e8c81ecec51c25e07d005e002a5479b/with/894460d22c434e73d60b71ec031611988e687c8b/libpurple/protocols/msn/slp.c http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8b http://www.pidgin.im/news/security/index.php?id=46 https://bugzilla.redhat.com/show_bug.cgi?id=589973 oval:org.mitre.oval:def:18547 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18547 pidgin-slp-packets-dos(58559) https://exchange.xforce.ibmcloud.com/vulnerabilities/58559
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.