Test Kennung:	1.3.6.1.4.1.25623.1.0.802713
Kategorie:	Denial of Service
Titel:	Pidgin Multiple Denial of Service Vulnerabilities - Windows
Zusammenfassung:	Pidgin is prone to multiple denial of service vulnerabilities.
Beschreibung:	Summary: Pidgin is prone to multiple denial of service vulnerabilities. Vulnerability Insight: The flaws are due to - A NULL pointer dereference error within the 'get_iter_from_chatbuddy()' function when handling nickname changes in XMPP chat rooms. - An error within the 'msn_oim_report_to_user()' function when handling UTF-8 encoded message. Vulnerability Impact: Successful exploitation will allow attacker to crash the affected application, denying service to legitimate users. Affected Software/OS: Pidgin version prior to 2.10.2 on Windows Solution: Upgrade to Pidgin version 2.10.2 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1178 50005 http://secunia.com/advisories/50005 52475 http://www.securityfocus.com/bid/52475 MDVSA-2012:029 http://www.mandriva.com/security/advisories?name=MDVSA-2012:029 RHSA-2012:1102 http://rhn.redhat.com/errata/RHSA-2012-1102.html http://developer.pidgin.im/ticket/14884 http://developer.pidgin.im/viewmtn/revision/diff/60f8379d0a610538cf42e0dd9ab1436c8b9308cd/with/3053d6a37cc6d8774aba7607b992a4408216adcd/libpurple/protocols/msn/oim.c http://developer.pidgin.im/viewmtn/revision/info/3053d6a37cc6d8774aba7607b992a4408216adcd http://pidgin.im/news/security/?id=61 oval:org.mitre.oval:def:18019 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18019 Common Vulnerability Exposure (CVE) ID: CVE-2011-4939 http://developer.pidgin.im/ticket/14392 http://developer.pidgin.im/viewmtn/revision/diff/10ead4688e3af4132d454fa3bc241480500651c9/with/d1d77da56217f3a083e1d459bef054db9f1d5699/pidgin/gtkconv.c http://developer.pidgin.im/viewmtn/revision/info/d1d77da56217f3a083e1d459bef054db9f1d5699 http://pidgin.im/news/security/?id=60 oval:org.mitre.oval:def:18406 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18406
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.