pidgin - several

Fixed packages 1

Vulnerabilities 12

• Unscored —
  CVE-2013-6477

  Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of ser…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6478

  gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, …

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6479

  util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent …

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6481

  libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6482

  Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a …

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6483

  The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in a…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6484

  The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of s…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6485

  Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service …

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6487

  Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remot…

  pidgin libgadu Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6489

  Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2013-6490 Public exploit EPSS 15%

  The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a n…

  pidgin Debian
  Feb 6, 2014
• Unscored —
  CVE-2014-0020

  The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC…

  pidgin Debian
  Feb 6, 2014