Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201206-11
HistoryJun 21, 2012 - 12:00 a.m.

Pidgin: Multiple vulnerabilities

2012-06-2100:00:00
Gentoo Foundation
security.gentoo.org
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.072

Percentile

94.1%

JSON

Background

Pidgin is an GTK Instant Messenger client.

Description

Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details.

Impact

These vulnerabilities allow for arbitrary file retrieval, Denial of Service and arbitrary code execution with the privileges of the user running Pidgin.

Workaround

There is no known workaround at this time.

Resolution

All Pidgin users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-im/pidgin-2.10.0-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-im/pidgin< 2.10.0-r1UNKNOWN

Related

openvas 69
nessus 48
securityvulns 7
altlinux 10
nvd 5
ubuntucve 5
fedora 13
cve 5
prion 5
cvelist 5
slackware 2
debiancve 5
packetstorm 1
debian 4
centos 2
seebug 2
exploitdb 1
redhat 2
oraclelinux 2
veracode 2
zdt 1
exploitpack 1
gentoo 1
ubuntu 1
openvas
openvas
Gentoo Security Advisory GLSA 201206-11 (Pidgin)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201206-11 (Pidgin)
2012-08-10 00:00:00
Fedora Update for gdk-pixbuf2 FEDORA-2011-8672
2011-07-12 00:00:00
nessus
nessus
GLSA-201206-11 : Pidgin: Multiple vulnerabilities
2012-06-22 00:00:00
Fedora 14 : gdk-pixbuf2-2.22.0-2.fc14 (2011-8667)
2011-08-17 00:00:00
Slackware 12.2 / 13.0 / 13.1 / 13.37 / current : pidgin (SSA:2011-178-01)
2011-07-28 00:00:00
securityvulns
securityvulns
pidgin instant messenger DoS
2011-07-04 00:00:00
[slackware-security] pidgin &#40;SSA:2011-178-01&#41;
2011-07-04 00:00:00
libpurple / Pidgin / Adium directory traversal
2010-01-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt1
2011-06-27 00:00:00
Security fix for the ALT Linux 5 package pidgin version 2.10.0-alt0.M50P.1
2011-10-03 00:00:00
Security fix for the ALT Linux 6 package pidgin version 2.9.0-alt1
2011-06-28 00:00:00
nvd
nvd
CVE-2011-2485
2012-07-03 16:40:29
CVE-2011-3594
2011-11-04 21:55:07
CVE-2010-0277
2010-01-09 18:30:01
ubuntucve
ubuntucve
CVE-2011-2485
2012-07-03 00:00:00
CVE-2011-3594
2011-11-04 00:00:00
CVE-2010-0013
2010-01-09 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: pidgin-2.9.0-1.fc15
2011-07-04 18:56:36
[SECURITY] Fedora 15 Update: gdk-pixbuf2-2.23.3-2.fc15
2011-06-26 18:48:34
[SECURITY] Fedora 15 Update: pidgin-2.10.1-1.fc15
2012-01-07 22:59:32
cve
cve
CVE-2011-2485
2012-07-03 16:40:29
CVE-2011-3594
2011-11-04 21:55:07
CVE-2010-0013
2010-01-09 18:30:01
prion
prion
Design/Logic Flaw
2012-07-03 16:40:00
Out-of-bounds
2011-11-04 21:55:00
Memory corruption
2010-01-09 18:30:00
cvelist
cvelist
CVE-2011-2485
2012-07-03 16:00:00
CVE-2011-3594
2011-11-04 21:00:00
CVE-2010-0013
2010-01-09 18:00:00
slackware
slackware
[slackware-security] pidgin
2011-06-28 04:19:23
[slackware-security] pidgin
2010-01-25 05:20:22
debiancve
debiancve
CVE-2011-2485
2012-07-03 16:40:29
CVE-2011-3594
2011-11-04 21:55:07
CVE-2010-0277
2010-01-09 18:30:01
packetstorm
packetstorm
Pidgin MSN 2.6.4 File Download
2010-01-20 00:00:00
debian
debian
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:16:12
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:06:11
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:27:39
centos
centos
finch, libpurple, pidgin security update
2010-01-14 21:33:39
finch, libpurple, pidgin security update
2011-10-14 18:48:12
seebug
seebug
Pidgin MSN <= 2.6.4 File Download Vulnerability
2014-07-01 00:00:00
Pidgin &quot;silc_private_message()&quot;拒绝服务漏洞
2011-11-22 00:00:00
exploitdb
exploitdb
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
redhat
redhat
(RHSA-2010:0044) Important: pidgin security update
2010-01-14 00:00:00
(RHSA-2011:1371) Moderate: pidgin security update
2011-10-13 00:00:00
oraclelinux
oraclelinux
pidgin security update
2010-01-14 00:00:00
pidgin security update
2011-10-14 00:00:00
veracode
veracode
Directory Traversal
2020-04-10 00:43:30
Denial Of Service (DoS)
2020-04-10 01:03:46
zdt
zdt
Pidgin MSN <= 2.6.4 File Download Vulnerability
2010-01-19 00:00:00
exploitpack
exploitpack
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
gentoo
gentoo
gdk-pixbuf: Denial of service
2012-06-23 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2011-11-21 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.072

Percentile

94.1%

JSON
Related for GLSA-201206-11
openvas69nessus48securityvulns7altlinux10nvd5ubuntucve5fedora13cve5prion5cvelist5slackware2debiancve5packetstorm1debian4centos2seebug2exploitdb1redhat2oraclelinux2veracode2zdt1exploitpack1gentoo1ubuntu1