[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-3711

Date: (C)2010-10-27   (M)2017-09-22
 
CVSS Score: 4.0Access Vector: NETWORK
Exploitability Subscore: 8.0Access Complexity: LOW
Impact Subscore: 2.9Authentication: SINGLE_INSTANCE
 Confidentiality: NONE
 Integrity: NONE
 Availability: PARTIAL











libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.

Reference:
SECTRACK-1024623
SECUNIA-41893
SECUNIA-41899
SECUNIA-42075
SECUNIA-42294
BID-44283
OSVDB-68773
ADV-2010-2753
ADV-2010-2754
ADV-2010-2755
ADV-2010-2847
ADV-2010-2851
ADV-2010-2870
FEDORA-2010-16629
FEDORA-2010-16876
FEDORA-2010-17130
MDVSA-2010:208
RHSA-2010:0788
RHSA-2010:0890
SSA:2010-305-02
USN-1014-1
http://developer.pidgin.im/viewmtn/revision/info/b01c6a1f7fe4d86b83f5f10917b3cb713989cfcc
http://pidgin.im/news/security/?id=48
https://bugzilla.redhat.com/show_bug.cgi?id=641921
pidgin-purplebase64decode-dos(62708)

CPE    34
cpe:/a:pidgin:pidgin:2.7.0
cpe:/a:pidgin:pidgin:2.7.1
cpe:/a:pidgin:pidgin:2.7.2
cpe:/a:pidgin:pidgin:2.7.3
...
CWE    1
CWE-20
OVAL    18
oval:org.secpod.oval:def:300017
oval:org.secpod.oval:def:500476
oval:org.secpod.oval:def:100567
oval:org.secpod.oval:def:101178
...

© 2013 SecPod Technologies