CVE-2016-2373

概要

参考情報

• debian.org/security/2016/dsa-3620 · Third Party Advisory
• pidgin.im/news/security · Patch
• securityfocus.com/bid/91335 · Third Party Advisory
• talosintelligence.com/reports/TALOS-2016-0141 · Technical Description
• ubuntu.com/usn/USN-3031-1 · Third Party Advisory
• security.gentoo.org/glsa/201701-38

pidgin のその他の脆弱性

• CVE-2019-25544中 5.5Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively lo…
• CVE-2022-26491中 5.9An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicio…
• CVE-2012-1257中 5.5Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session mon…
• CVE-2016-1000030緊急 9.8Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutl…
• CVE-2017-2640緊急 9.8An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use…