Test Kennung:	1.3.6.1.4.1.25623.1.0.801536
Kategorie:	Denial of Service
Titel:	Pidgin Libpurple 'purple_base64_decode()' Denial of Service Vulnerabilities (Windows)
Zusammenfassung:	This host has Pidgin installed and is prone to Denial of Service; vulnerabilities.
Beschreibung:	Summary: This host has Pidgin installed and is prone to Denial of Service vulnerabilities. Vulnerability Insight: The issues are caused by errors in 'libpurple' that does not validate the return value from 'purple_base64_decode()' function when processing malformed Yahoo!, MSN, MySpaceIM, XMPP or NTLM data. Vulnerability Impact: Attackers can exploit this issue to crash an affected application. Affected Software/OS: Pidgin version prior to 2.7.4 on Windows. Solution: Upgrade to Pidgin version 2.7.4 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3711 BugTraq ID: 44283 http://www.securityfocus.com/bid/44283 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050227.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050133.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050695.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:208 http://www.osvdb.org/68773 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18506 http://www.redhat.com/support/errata/RHSA-2010-0788.html http://www.redhat.com/support/errata/RHSA-2010-0890.html http://securitytracker.com/id?1024623 http://secunia.com/advisories/41893 http://secunia.com/advisories/41899 http://secunia.com/advisories/42075 http://secunia.com/advisories/42294 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462352 http://www.ubuntu.com/usn/USN-1014-1 http://www.vupen.com/english/advisories/2010/2753 http://www.vupen.com/english/advisories/2010/2754 http://www.vupen.com/english/advisories/2010/2755 http://www.vupen.com/english/advisories/2010/2847 http://www.vupen.com/english/advisories/2010/2851 http://www.vupen.com/english/advisories/2010/2870 XForce ISS Database: pidgin-purplebase64decode-dos(62708) https://exchange.xforce.ibmcloud.com/vulnerabilities/62708
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.