Skip to content
OpenAdvisories

Package · Debian

pidgin

82 known vulnerabilities.

82 results · Feed

  • Unscored —

    An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client co…

  • Unscored —
    CVE-2012-1257 Public exploit

    Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information v…

  • Unscored —

    Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of ret…

  • High 7.5

    An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server …

  • Unscored —

    A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the …

  • Unscored —

    A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…

  • Unscored —

    A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…

  • Unscored —

    A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…

  • Unscored —

    An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted…

  • Unscored —

    A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…

  • Unscored —

    A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…

  • Unscored —

    An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…

  • Unscored —

    An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data…

  • Unscored —

    A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT …

  • Unscored —

    An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…

  • Unscored —

    A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the…

  • Unscored —

    A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…

  • Unscored —

    An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the serv…

  • Unscored —

    An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact…

  • Unscored —

    Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT…

  • Unscored —

    The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 …

  • Unscored —

    The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows …

  • Unscored —

    markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of s…

  • Unscored —

    nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause …

  • Unscored —

    Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of…

  • Unscored —

    Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a …

  • Unscored —
    CVE-2013-6490 Public exploit EPSS 15%

    The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a n…

  • Unscored —

    Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remot…

  • Unscored —

    libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash…

  • Unscored —

    util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent …

  • Unscored —

    Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service …

  • Unscored —

    The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in a…

  • Unscored —

    gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, …

  • Unscored —

    Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of ser…

  • Unscored —

    The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of s…

  • Unscored —

    The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows rem…

  • Unscored —

    The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC…

  • Unscored —

    The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files…

  • Unscored —

    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user I…

  • Unscored —

    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to exe…