KLA10932
Multiple vulnerabilities in Pidgin

Aktualisiert: 03/29/2019

Erkennungsdatum ?	06/21/2016
Schweregrad ?	Hoch
Beschreibung	Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to overwrite arbitrary files, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: A directory traversal vulnerability in the handling of MXIT protocol can be exploited remotely via specially designed MXIT data sent from the server to overwrite arbitrary files; An out-of-bounds read vulnerability can be exploited remotely via specialy designed MXIT data (a particular string) possibly to obtain sensitive information; A buffer overflow vulnerability in the handling of MXIT protocol can be exploited remotely via specially designed data possibly to cause a denial of service. Technical details Vulnerability (1) occurs if liburple is triggered by man-in-the-middle or a malicious server to overwrite local files. The name and and content of these files can be specified by the remote attacker. To trigger vulnerability (3) a malicious server or man-in-the-middle can send negative length values.
Beeinträchtigte Produkte	Pidgin versions earlier than 2.11.0
Lösung	Update to the latest version Download Pidgin
Ursprüngliche Informationshinweise	Pidgin Security Advisory
Folgen ?	OSI [?] DoS [?] OAF [?]
CVE-IDS ?	CVE-2016-23804.3High CVE-2016-23786.8High CVE-2016-43235.8High
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA10932Multiple vulnerabilities in Pidgin

KLA10932
Multiple vulnerabilities in Pidgin