CVE-2012-2093

概要

参考情報

• hg.gajim.org/gajim/rev/f046e4aaf7d4
• lists.fedoraproject.org/pipermail/package-announce/2012-April/079169.html
• lists.fedoraproject.org/pipermail/package-announce/2012-April/079237.html
• lists.fedoraproject.org/pipermail/package-announce/2012-April/079241.html
• secunia.com/advisories/48695 · Vendor Advisory
• secunia.com/advisories/48794
• security.gentoo.org/glsa/glsa-201208-04.xml
• openwall.com/lists/oss-security/2012/04/10/15
• openwall.com/lists/oss-security/2012/04/10/6
• securityfocus.com/bid/53017
• exchange.xforce.ibmcloud.com/vulnerabilities/74869
• trac.gajim.org/changeset/13759/src/common/latex.py

gajim のその他の脆弱性

• CVE-2022-39835中 5.3An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were n…
• CVE-2021-41055高 7.5Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (…
• CVE-2016-10376中 4.5Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP s…
• CVE-2015-8688中 5.4Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.
• CVE-2012-5524中 4.3The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke…