Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803102
Kategorie:Buffer overflow
Titel:Pidgin MXit Message Parsing Buffer Overflow Vulnerability (Windows)
Zusammenfassung:This host has installed with Pidgin and is prone to buffer; overflow vulnerability.
Beschreibung:Summary:
This host has installed with Pidgin and is prone to buffer
overflow vulnerability.

Vulnerability Insight:
A boundary error within the 'mxit_show_message()' function, when parsing
incoming instant messages containing inline images.

Vulnerability Impact:
Successful exploitation will allow attacker to cause a stack-based buffer
overflow via a specially crafted RX message which may lead to the execution
of arbitrary code in the context of the application or to denial-of-service.

Affected Software/OS:
Pidgin version prior to 2.10.5 on Windows

Solution:
Upgrade to Pidgin version 2.10.5 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: BugTraq ID: 54322
Common Vulnerability Exposure (CVE) ID: CVE-2012-3374
http://www.mandriva.com/security/advisories?name=MDVSA-2012:105
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17678
RedHat Security Advisories: RHSA-2012:1102
http://rhn.redhat.com/errata/RHSA-2012-1102.html
http://secunia.com/advisories/50005
SuSE Security Announcement: SUSE-SU-2012:0890 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00009.html
CopyrightCopyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.