KLA10448
Multiple Pidgin vulnerabilities

Aktualisiert: 03/29/2019

Erkennungsdatum ?	10/22/2014
Schweregrad ?	Hoch
Beschreibung	Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information and write local files. Below is a complete list of vulnerabilities Vectors related to Jabber protocol can be exploited remotely via a specially designed XMPP message; Improper SSL consider can be exploited remotely via a specially designed certificate; Vectors related to MXit protocol can be exploited remotely via a specially designed certificate; Vectors related to Novell GroupWise protocol can be exploited remotely via a specially designed server message; A path traversal vulnerability can be exploited remotely via specially designed smiley theme.
Beeinträchtigte Produkte	Pidgin versions earlier than 2.10.10
Lösung	Update to latest version Get Pidgin
Folgen ?	OSI [?] DoS [?] WLF [?]
CVE-IDS ?	CVE-2014-36955.0High CVE-2014-36946.4High CVE-2014-36985.0High CVE-2014-36976.4High CVE-2014-36965.0High
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA10448Multiple Pidgin vulnerabilities