Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-0277
HistoryJan 09, 2010 - 6:30 p.m.

CVE-2010-0277

2010-01-0918:30:01
CWE-399
mitre
web.nvd.nist.gov
49
cve-2010-0277
msn protocol plugin
libpurple
pidgin
adium
denial of service
memory corruption

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.3

Confidence

High

EPSS

0.209

Percentile

96.4%

JSON

slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

Affected configurations

Nvd
Node
adiumadiumMatch1.3.8
OR
pidginpidginRange≀2.6.5
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
OR
pidginpidginMatch2.4.2
OR
pidginpidginMatch2.4.3
OR
pidginpidginMatch2.5.0
OR
pidginpidginMatch2.5.1
OR
pidginpidginMatch2.5.2
OR
pidginpidginMatch2.5.3
OR
pidginpidginMatch2.5.4
OR
pidginpidginMatch2.5.5
OR
pidginpidginMatch2.5.6
OR
pidginpidginMatch2.5.7
OR
pidginpidginMatch2.5.8
OR
pidginpidginMatch2.5.9
OR
pidginpidginMatch2.6.0
OR
pidginpidginMatch2.6.1
OR
pidginpidginMatch2.6.2
OR
pidginpidginMatch2.6.4
VendorProductVersionCPE
adiumadium1.3.8cpe:2.3:a:adium:adium:1.3.8:*:*:*:*:*:*:*
pidginpidgin*cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*
pidginpidgin2.0.0cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*
pidginpidgin2.0.1cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*
pidginpidgin2.0.2cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*
pidginpidgin2.1.0cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*
pidginpidgin2.1.1cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*
pidginpidgin2.2.0cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*
pidginpidgin2.2.1cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*
pidginpidgin2.2.2cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 301

References

Related

nvd 2
prion 2
debiancve 2
cvelist 2
ubuntucve 2
openvas 63
securityvulns 6
veracode 2
debian 4
nessus 38
fedora 9
altlinux 2
redhat 2
ubuntu 2
oraclelinux 2
slackware 2
centos 2
freebsd 1
seebug 2
packetstorm 1
exploitdb 1
zdt 1
exploitpack 1
cve 1
gentoo 1
nvd
nvd
CVE-2010-0277
2010-01-09 18:30:01
CVE-2010-0013
2010-01-09 18:30:01
prion
prion
Memory corruption
2010-01-09 18:30:00
Directory traversal
2010-01-09 18:30:00
debiancve
debiancve
CVE-2010-0277
2010-01-09 18:30:01
CVE-2010-0013
2010-01-09 18:30:01
cvelist
cvelist
CVE-2010-0277
2010-01-09 18:00:00
CVE-2010-0013
2010-01-09 18:00:00
ubuntucve
ubuntucve
CVE-2010-0277
2010-01-09 00:00:00
CVE-2010-0013
2010-01-09 00:00:00
openvas
openvas
Pidgin MSN Protocol Plugin Denial Of Service Vulnerability (Windows)
2010-01-16 00:00:00
Pidgin < 2.6.6 MSN Protocol Plugin Denial Of Service Vulnerability - Linux
2010-01-16 00:00:00
Pidgin MSN Protocol Plugin DoS Vulnerability - Windows
2010-01-16 00:00:00
securityvulns
securityvulns
HP Power Manager crossite request forgery
2011-02-14 00:00:00
[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager &#40;HPPM&#41; Running on Linux and Windows, Cross Site Request Forgery &#40;CSRF&#41;
2011-02-14 00:00:00
Pidgin / Adium messenger multiple security vulnerabilities
2010-02-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:40:21
Directory Traversal
2020-04-10 00:43:30
debian
debian
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:27:39
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:17:54
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:16:12
nessus
nessus
Fedora 12 : pidgin-2.6.6-1.fc12 (2010-1383)
2010-07-01 00:00:00
openSUSE Security Update : finch (finch-2032)
2010-03-04 00:00:00
SuSE 10 Security Update : pidgin (ZYPP Patch Number 6856)
2011-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: pidgin-2.6.6-1.fc12
2010-02-20 00:26:26
[SECURITY] Fedora 12 Update: pidgin-2.7.0-2.fc12
2010-05-24 19:48:53
[SECURITY] Fedora 12 Update: pidgin-2.7.2-1.fc12
2010-07-30 08:34:46
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1
2010-06-13 00:00:00
Security fix for the ALT Linux 5 package pidgin version 2.6.6-alt1
2010-02-22 00:00:00
redhat
redhat
(RHSA-2010:0115) Moderate: pidgin security update
2010-02-18 00:00:00
(RHSA-2010:0044) Important: pidgin security update
2010-01-14 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2010-02-22 00:00:00
Pidgin vulnerabilities
2010-01-18 00:00:00
oraclelinux
oraclelinux
pidgin security update
2010-02-18 00:00:00
pidgin security update
2010-01-14 00:00:00
slackware
slackware
[slackware-security] pidgin
2010-03-11 02:17:44
[slackware-security] pidgin
2010-01-25 05:20:22
centos
centos
finch, libpurple, pidgin security update
2010-02-20 00:04:47
finch, libpurple, pidgin security update
2010-01-14 21:33:39
freebsd
freebsd
pidgin -- multiple remote denial of service vulnerabilities
2010-02-18 00:00:00
seebug
seebug
Pidgin倚δΈͺζ‹’η»ζœεŠ‘ζΌζ΄ž
2010-03-02 00:00:00
Pidgin MSN <= 2.6.4 File Download Vulnerability
2014-07-01 00:00:00
packetstorm
packetstorm
Pidgin MSN 2.6.4 File Download
2010-01-20 00:00:00
exploitdb
exploitdb
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
zdt
zdt
Pidgin MSN <= 2.6.4 File Download Vulnerability
2010-01-19 00:00:00
exploitpack
exploitpack
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
cve
cve
CVE-2010-0013
2010-01-09 18:30:01
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2012-06-21 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.3

Confidence

High

EPSS

0.209

Percentile

96.4%

JSON
Related for CVE-2010-0277
nvd2prion2debiancve2cvelist2ubuntucve2openvas63securityvulns6veracode2debian4nessus38fedora9altlinux2redhat2ubuntu2oraclelinux2slackware2centos2freebsd1seebug2packetstorm1exploitdb1zdt1exploitpack1cve1gentoo1