pidgin: multiple vulnerabilities
| Package(s): | pidgin | CVE #(s): | CVE-2014-3694 CVE-2014-3695 CVE-2014-3696 CVE-2014-3698 | ||||||||||||||||||||||||||||
| Created: | October 24, 2014 | Updated: | December 11, 2014 | ||||||||||||||||||||||||||||
| Description: | From the Debian advisory:
CVE-2014-3694: It was discovered that the SSL/TLS plugins failed to validate the basic constraints extension in intermediate CA certificates. CVE-2014-3695: Yves Younan and Richard Johnson discovered that emotictons with overly large length values could crash Pidgin. CVE-2014-3696: Yves Younan and Richard Johnson discovered that malformed Groupwise messages could crash Pidgin. CVE-2014-3698: Thijs Alkemade and Paul Aurich discovered that malformed XMPP messages could result in memory disclosure. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||