Packet Storm

Mandriva Linux Security Advisory 2013-025: Posted Mar 14, 2013; Authored by Mandriva | Site mandriva.com; Mandriva Linux Security Advisory 2013-025 - The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted mxit/imagestrips pathname. Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header. sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service via a crafted packet. upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service by leveraging access to the local network. This update provides pidgin 2.10.7, which is not vulnerable to these issues.; tags | advisory, remote, web, denial of service, overflow, arbitrary, local, protocol; systems | linux, mandriva; advisories | CVE-2013-0271, CVE-2013-0272, CVE-2013-0273, CVE-2013-0274; SHA-256 | 1947a7196d370ec292c6d6196bc378f7ab94ffd059b4a95d0ad67f48a214a6e6; Download | Favorite | View

Related Files

No related files