CVE-2008-3532

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi
• developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch · Exploit
• developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch
• developer.pidgin.im/ticket/6500 · Patch
• secunia.com/advisories/31390
• secunia.com/advisories/32859
• secunia.com/advisories/33102
• support.avaya.com/elmodocs2/security/ASA-2008-493.htm
• mandriva.com/security/advisories
• redhat.com/support/errata/RHSA-2008-1023.html
• securityfocus.com/bid/30553
• ubuntu.com/usn/USN-675-1
• vupen.com/english/advisories/2008/2318
• exchange.xforce.ibmcloud.com/vulnerabilities/44220
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10979
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18327

pidgin のその他の脆弱性

• CVE-2019-25544中 5.5Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively lo…
• CVE-2022-26491中 5.9An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicio…
• CVE-2012-1257中 5.5Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session mon…
• CVE-2016-1000030緊急 9.8Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutl…
• CVE-2017-2640緊急 9.8An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use…