ID de Prueba:	1.3.6.1.4.1.25623.1.0.801764
Categoría:	Denial of Service
Título:	Pidgin Yahoo Protocol 'YMSG' NULL Pointer Dereference Denial of Service Vulnerability (Windows)
Resumen:	This host has installed with Pidgin and is prone to Denial of; Service vulnerability.
Descripción:	Summary: This host has installed with Pidgin and is prone to Denial of Service vulnerability. Vulnerability Insight: The flaw is due to a NULL pointer dereference error when processing certain YMSG packets, which can be exploited to crash the process by sending specially crafted YMSG packets. Vulnerability Impact: Successful exploitation will allow attacker to crash the affected application, denying service to legitimate users. Affected Software/OS: Pidgin version prior 2.6.0 through 2.7.10 on Windows Solution: Upgrade to Pidgin version 2.7.11 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 46837 Common Vulnerability Exposure (CVE) ID: CVE-2011-1091 http://www.securityfocus.com/bid/46837 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055874.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056309.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18402 http://www.redhat.com/support/errata/RHSA-2011-0616.html http://www.redhat.com/support/errata/RHSA-2011-1371.html http://secunia.com/advisories/43695 http://secunia.com/advisories/43721 http://secunia.com/advisories/46376 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.466884 SuSE Security Announcement: openSUSE-SU-2012:0066 (Google Search) https://hermes.opensuse.org/messages/13195955 http://www.vupen.com/english/advisories/2011/0643 http://www.vupen.com/english/advisories/2011/0661 http://www.vupen.com/english/advisories/2011/0669 http://www.vupen.com/english/advisories/2011/0703 XForce ISS Database: pidgin-yahoo-protocol-dos(66055) https://exchange.xforce.ibmcloud.com/vulnerabilities/66055
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.