Test Kennung:	1.3.6.1.4.1.25623.1.0.902650
Kategorie:	Denial of Service
Titel:	Pidgin XMPP And SILC Protocols Denial of Service Vulnerabilities (Windows)
Zusammenfassung:	This host is installed with Pidgin and is prone to denial of; service vulnerabilities.
Beschreibung:	Summary: This host is installed with Pidgin and is prone to denial of service vulnerabilities. Vulnerability Insight: Multiplw flaws are due to - An error in the silc_channel_message function in ops.c in the SILC protocol plugin in libpurple, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages. - An error in the XMPP protocol plugin in libpurple, which fails to ensure that the incoming message contained all required fields when receiving various stanzas related to voice and video chat. - An error in the family_feedbag.c in the oscar protocol plugin, which fails to validate that a piece of text was UTF-8 when receiving various incoming messages. Vulnerability Impact: Successful exploitation will allow remote attackers to cause the application to crash, denying service to legitimate users. Affected Software/OS: Pidgin versions prior to 2.10.1 Solution: Upgrade to Pidgin version 2.10.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	BugTraq ID: 51070 BugTraq ID: 51074 Common Vulnerability Exposure (CVE) ID: CVE-2011-4602 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18420 http://www.redhat.com/support/errata/RHSA-2011-1820.html http://www.redhat.com/support/errata/RHSA-2011-1821.html http://secunia.com/advisories/47219 http://secunia.com/advisories/47234 SuSE Security Announcement: openSUSE-SU-2012:0066 (Google Search) https://hermes.opensuse.org/messages/13195955 Common Vulnerability Exposure (CVE) ID: CVE-2011-4603 http://www.securityfocus.com/bid/51074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18303 Common Vulnerability Exposure (CVE) ID: CVE-2011-4601 BugTraq ID: 51010 http://www.securityfocus.com/bid/51010 http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 http://www.openwall.com/lists/oss-security/2011/12/10/1 http://www.openwall.com/lists/oss-security/2011/12/10/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18408
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.