[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2010:0115-01 -- Redhat pidgin and finch

ID: oval:org.secpod.oval:def:500480Date: (C)2012-01-31   (M)2024-01-29
Class: PATCHFamily: unix




Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An input sanitization flaw was found in the way Pidgin"s MSN protocol implementation handled MSNSLP invitations. A remote attacker could send a specially-crafted INVITE request that would cause a denial of service . A denial of service flaw was found in Finch"s XMPP chat implementation, when using multi-user chat. If a Finch user in a multi-user chat session were to change their nickname to contain the HTML "br" element, it would cause Finch to crash. Red Hat would like to thank Sadrul Habib Chowdhury of the Pidgin project for responsibly reporting the CVE-2010-0420 issue. A denial of service flaw was found in the way Pidgin processed emoticon images. A remote attacker could flood the victim with emoticon images during mutual communication, leading to excessive CPU use. These packages upgrade Pidgin to version 2.6.6. Pidgin must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4
Product:
pidgin
finch
Reference:
RHSA-2010:0115-01
CVE-2010-0277
CVE-2010-0420
CVE-2010-0423
CVE    3
CVE-2010-0277
CVE-2010-0420
CVE-2010-0423
CPE    33
cpe:/a:finch:finch
cpe:/a:pidgin:pidgin:2.0.0
cpe:/o:redhat:enterprise_linux:5
cpe:/a:pidgin:pidgin:2.0.1
...

© SecPod Technologies