Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.802906
Kategorie:Denial of Service
Titel:Pidgin MSN and XMPP Denial of Service Vulnerabilities - Windows
Zusammenfassung:This host has installed with Pidgin and is prone to denial of; service vulnerabilities.
Beschreibung:Summary:
This host has installed with Pidgin and is prone to denial of
service vulnerabilities.

Vulnerability Insight:
- An error in 'msn_message_parse_payload()' function handling messages with
certain characters or character encodings can be exploited to cause a
crash.

- An error in SOCKS5 proxy handling code can be exploited to dereference an
invalid pointer and cause a crash by sending multiple specially crafted
file transfer requests.

Vulnerability Impact:
Successful exploitation will allow attacker to crash the affected
application.

Affected Software/OS:
Pidgin version prior 2.10.4 on Windows

Solution:
Upgrade to Pidgin version 2.10.4 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-2318
BugTraq ID: 53400
http://www.securityfocus.com/bid/53400
http://www.mandriva.com/security/advisories?name=MDVSA-2012:082
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17448
RedHat Security Advisories: RHSA-2012:1102
http://rhn.redhat.com/errata/RHSA-2012-1102.html
http://secunia.com/advisories/50005
SuSE Security Announcement: openSUSE-SU-2012:0866 (Google Search)
https://hermes.opensuse.org/messages/15136503
Common Vulnerability Exposure (CVE) ID: CVE-2012-2214
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17886
CopyrightCopyright (C) 2012 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.