ID de Prueba:	1.3.6.1.4.1.25623.1.0.801764
Categoría:	Denial of Service
Título:	Pidgin Yahoo Protocol 'YMSG' NULL Pointer Dereference DoS Vulnerability - Windows
Resumen:	Pidgin is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Pidgin is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to a NULL pointer dereference error when processing certain YMSG packets, which can be exploited to crash the process by sending specially crafted YMSG packets. Vulnerability Impact: Successful exploitation will allow attacker to crash the affected application, denying service to legitimate users. Affected Software/OS: Pidgin version 2.6.0 through 2.7.10 on Windows. Solution: Update to version 2.7.11 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1091 43695 http://secunia.com/advisories/43695 43721 http://secunia.com/advisories/43721 46376 http://secunia.com/advisories/46376 46837 http://www.securityfocus.com/bid/46837 ADV-2011-0643 http://www.vupen.com/english/advisories/2011/0643 ADV-2011-0661 http://www.vupen.com/english/advisories/2011/0661 ADV-2011-0669 http://www.vupen.com/english/advisories/2011/0669 ADV-2011-0703 http://www.vupen.com/english/advisories/2011/0703 FEDORA-2011-3113 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055874.html FEDORA-2011-3150 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056309.html RHSA-2011:0616 http://www.redhat.com/support/errata/RHSA-2011-0616.html RHSA-2011:1371 http://www.redhat.com/support/errata/RHSA-2011-1371.html SSA:2011-070-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.466884 http://developer.pidgin.im/viewmtn/revision/diff/5cbe18129b6e7c660bc093f7e5e1414ceca17d04/with/a7c415abba1f5f01f79295337518837f73d99bb7/libpurple/protocols/yahoo/libymsg.c http://developer.pidgin.im/viewmtn/revision/info/a7c415abba1f5f01f79295337518837f73d99bb7 http://www.pidgin.im/news/security/?id=51 https://bugzilla.redhat.com/show_bug.cgi?id=683031 openSUSE-SU-2012:0066 https://hermes.opensuse.org/messages/13195955 oval:org.mitre.oval:def:18402 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18402 pidgin-yahoo-protocol-dos(66055) https://exchange.xforce.ibmcloud.com/vulnerabilities/66055
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.