|
|
| |
|
| |
pidgin: multiple vulnerabilities
| Package(s): | pidgin |
CVE #(s): | CVE-2011-4602
CVE-2011-4603
|
| Created: | December 15, 2011 |
Updated: | January 9, 2012 |
| Description: |
From the Red Hat advisory:
An input sanitization flaw was found in the way the Pidgin SILC (Secure
Internet Live Conferencing) protocol plug-in escaped certain UTF-8
characters in channel messages. A remote attacker could use this flaw to
crash Pidgin via a specially-crafted SILC message. (CVE-2011-4603)
Multiple NULL pointer dereference flaws were found in the Jingle extension
of the Extensible Messaging and Presence Protocol (XMPP) protocol plug-in
in Pidgin. A remote attacker could use these flaws to crash Pidgin via a
specially-crafted Jingle multimedia message. (CVE-2011-4602) |
| Alerts: |
|
( Log in to post comments)
|
|
|