0 0 SecurityOrb_Staff https://www.securityorb.com/wp-content/uploads/2020/06/SecurityOrb_Logo-1.png SecurityOrb_Staff2015-06-04 15:17:142015-06-04 15:17:14Pidgin Multiple Vulnerabilities Feb 2014 (Windows)
SummaryThe host is installed with Pidgin and is prone to multiple vulnerabilities.
Vulnerability Detection ResultVulnerability was detected according to the Vulnerability Detection Method.
ImpactSuccessful exploitation will allow remote attackers to conduct denial of service or execute arbitrary programs or spoof iq traffic.
Impact Level: System/Application
SolutionUpgrade to Pidgin version 2.10.8 or later, For updates refer to http://www.pidgin.im/
Vulnerability InsightThe flaws are due to an, – Improper validation of data by the Yahoo protocol plugin. – Improper validation of argument counts by IRC protocol plugin. – Improper validation of input to content-length header. – Integer signedness error in the ‘MXit’ functionality. – Integer overflow in ‘ibpurple/protocols/gg/lib/http.c’ in the ‘Gadu-Gadu’ (gg) parser. – Error due to incomplete fix for earlier flaw. – Integer overflow condition in the ‘process_chunked_data’ function in ‘util.c’. – Error in ‘STUN’ protocol implementation in ‘libpurple’. – Error in the ‘XMPP’ protocol plugin in ‘libpurple’. – Error in the MSN module. – Improper validation of the length field in ‘libpurple/protocols/yahoo/libymsg.c’. – Improper allocation of memory by ‘util.c’ in ‘libpurple’. – Error in the libx11 library. – Multiple integer signedness errors in libpurple.
Vulnerability Detection MethodGet the installed version with the help of detect NVT and check the version is vulnerable or not.
Version used: $Revision: 302 $