4

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pidgin ≫ Pidgin Version <= 2.7.3
Pidgin ≫ Pidgin Version2.0.0
Pidgin ≫ Pidgin Version2.0.1
Pidgin ≫ Pidgin Version2.0.2
Pidgin ≫ Pidgin Version2.1.0
Pidgin ≫ Pidgin Version2.1.1
Pidgin ≫ Pidgin Version2.2.0
Pidgin ≫ Pidgin Version2.2.1
Pidgin ≫ Pidgin Version2.2.2
Pidgin ≫ Pidgin Version2.3.0
Pidgin ≫ Pidgin Version2.3.1
Pidgin ≫ Pidgin Version2.4.0
Pidgin ≫ Pidgin Version2.4.1
Pidgin ≫ Pidgin Version2.4.2
Pidgin ≫ Pidgin Version2.4.3
Pidgin ≫ Pidgin Version2.5.0
Pidgin ≫ Pidgin Version2.5.1
Pidgin ≫ Pidgin Version2.5.2
Pidgin ≫ Pidgin Version2.5.3
Pidgin ≫ Pidgin Version2.5.4
Pidgin ≫ Pidgin Version2.5.5
Pidgin ≫ Pidgin Version2.5.6
Pidgin ≫ Pidgin Version2.5.7
Pidgin ≫ Pidgin Version2.5.8
Pidgin ≫ Pidgin Version2.5.9
Pidgin ≫ Pidgin Version2.6.0
Pidgin ≫ Pidgin Version2.6.1
Pidgin ≫ Pidgin Version2.6.2
Pidgin ≫ Pidgin Version2.6.4
Pidgin ≫ Pidgin Version2.6.5
Pidgin ≫ Pidgin Version2.6.6
Pidgin ≫ Pidgin Version2.7.0
Pidgin ≫ Pidgin Version2.7.1
Pidgin ≫ Pidgin Version2.7.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.27% 0.868
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/41899
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0788.html
http://www.ubuntu.com/usn/USN-1014-1
http://www.vupen.com/english/advisories/2010/2755
Vendor Advisory
http://developer.pidgin.im/viewmtn/revision/info/b01c6a1f7fe4d86b83f5f10917b3cb713989cfcc
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050227.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050695.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050133.html
http://pidgin.im/news/security/?id=48
Patch
Vendor Advisory
http://secunia.com/advisories/41893
Vendor Advisory
http://secunia.com/advisories/42075
http://secunia.com/advisories/42294
http://securitytracker.com/id?1024623
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462352
http://www.mandriva.com/security/advisories?name=MDVSA-2010:208
http://www.osvdb.org/68773
http://www.redhat.com/support/errata/RHSA-2010-0890.html
http://www.securityfocus.com/bid/44283
http://www.vupen.com/english/advisories/2010/2753
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2754
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2847
http://www.vupen.com/english/advisories/2010/2851
http://www.vupen.com/english/advisories/2010/2870
https://bugzilla.redhat.com/show_bug.cgi?id=641921
https://exchange.xforce.ibmcloud.com/vulnerabilities/62708
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18506