CVE-2014-3694

概要

参考情報

• hg.pidgin.im/pidgin/main/rev/2e4475087f04 · Issue Tracking
• lists.opensuse.org/opensuse-updates/2014-11/msg00023.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2014-11/msg00037.html · Third Party Advisory
• pidgin.im/news/security · Patch
• secunia.com/advisories/60741
• secunia.com/advisories/61968
• debian.org/security/2014/dsa-3055 · Third Party Advisory
• ubuntu.com/usn/USN-2390-1 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1854

pidgin のその他の脆弱性

• CVE-2019-25544中 5.5Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively lo…
• CVE-2022-26491中 5.9An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicio…
• CVE-2012-1257中 5.5Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session mon…
• CVE-2016-1000030緊急 9.8Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutl…
• CVE-2017-2640緊急 9.8An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use…