Test ID:	1.3.6.1.4.1.25623.1.0.902650
Category:	Denial of Service
Title:	Pidgin XMPP And SILC Protocols Denial of Service Vulnerabilities - Windows
Summary:	Pidgin is prone to denial of service vulnerabilities.
Description:	Summary: Pidgin is prone to denial of service vulnerabilities. Vulnerability Insight: Multiplw flaws are due to - An error in the silc_channel_message function in ops.c in the SILC protocol plugin in libpurple, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages. - An error in the XMPP protocol plugin in libpurple, which fails to ensure that the incoming message contained all required fields when receiving various stanzas related to voice and video chat. - An error in the family_feedbag.c in the oscar protocol plugin, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages. Vulnerability Impact: Successful exploitation will allow remote attackers to cause the application to crash, denying service to legitimate users. Affected Software/OS: Pidgin versions prior to 2.10.1 Solution: Upgrade to Pidgin version 2.10.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4602 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18420 http://www.redhat.com/support/errata/RHSA-2011-1820.html http://www.redhat.com/support/errata/RHSA-2011-1821.html http://secunia.com/advisories/47219 http://secunia.com/advisories/47234 SuSE Security Announcement: openSUSE-SU-2012:0066 (Google Search) https://hermes.opensuse.org/messages/13195955 Common Vulnerability Exposure (CVE) ID: CVE-2011-4603 BugTraq ID: 51074 http://www.securityfocus.com/bid/51074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18303 Common Vulnerability Exposure (CVE) ID: CVE-2011-4601 BugTraq ID: 51010 http://www.securityfocus.com/bid/51010 http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 http://www.openwall.com/lists/oss-security/2011/12/10/1 http://www.openwall.com/lists/oss-security/2011/12/10/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18408
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.