Test Kennung:	1.3.6.1.4.1.25623.1.0.68263
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2010:148 (pidgin)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to pidgin announced via advisory MDVSA-2010:148. A security vulnerability has been identified and fixed in pidgin: The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element (CVE-2010-2528). Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. This update provides pidgin 2.7.3, which is not vulnerable to this issue. Affected: 2008.0, 2009.0, 2010.0, 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2010:148 http://pidgin.im/news/security/ Risk factor : Medium CVSS Score: 4.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2528 40699 http://secunia.com/advisories/40699 41881 http://www.securityfocus.com/bid/41881 66506 http://www.osvdb.org/66506 ADV-2010-1887 http://www.vupen.com/english/advisories/2010/1887 ADV-2010-2221 http://www.vupen.com/english/advisories/2010/2221 SSA:2010-240-05 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462873 http://developer.pidgin.im/viewmtn/revision/diff/fcb70f7c12120206d30ad33223ff85be7b226d1c/with/8e8ff246492e45af8f8d0808296d6f2906794dc0/libpurple/protocols/oscar/family_icbm.c http://developer.pidgin.im/viewmtn/revision/info/8e8ff246492e45af8f8d0808296d6f2906794dc0 http://www.pidgin.im/news/security/index.php?id=47 oval:org.mitre.oval:def:18359 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18359 pidgin-xstatus-dos(60566) https://exchange.xforce.ibmcloud.com/vulnerabilities/60566
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.