Search for packages
| purl | pkg:deb/debian/pidgin@2.14.1-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zhu6-8jrm-73bc
Aliases: CVE-2022-26491 |
pidgin: MITM attack possible on non-DNSSEC XMPP connections |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-13y4-t2b9-pkg9 | pidgin: SILC remote crash on channel messages |
CVE-2011-4603
|
| VCID-1fmj-vjdg-g3eu | pidgin: Multiple NULL pointer deference flaws by processing certain Jingle stanzas in the XMPP protocol plug-in |
CVE-2011-4602
|
| VCID-1p3d-b4v1-6fdg | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6477
|
| VCID-1x1f-8ujk-53fw | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6484
|
| VCID-25qc-25g9-cbhn | (libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values |
CVE-2010-3711
|
| VCID-28mm-t6zv-b3fx | Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client |
CVE-2009-3615
|
| VCID-2v38-xu17-5ycr | Multiple vulnerabilities were found in Pidgin, the worst of which allowing for the remote execution of arbitrary code. |
CVE-2010-0013
|
| VCID-3m4a-pw2r-zkfb | Multiple vulnerabilities were found in Pidgin, the worst of which allowing for the remote execution of arbitrary code. |
CVE-2011-3594
|
| VCID-3zuy-sufn-tfcw | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6487
|
| VCID-562h-uev3-nqby | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6482
|
| VCID-59qb-mtwz-puda | pidgin: Smiley Denial of Service |
CVE-2010-0423
|
| VCID-5bxz-xddd-rudq | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2012-6152
|
| VCID-5k78-mks2-ckdk | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6483
|
| VCID-5ktd-d1vb-xqhb | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-0273
|
| VCID-5us8-sghn-zyf1 | security update |
CVE-2014-3696
|
| VCID-6gvz-3ye8-zyen | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2014-0020
|
| VCID-6jkc-nx2t-7fgd | Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS) |
CVE-2009-2703
|
| VCID-6utr-f9hr-wkhd | security update |
CVE-2014-3695
|
| VCID-71bq-9kpe-wbc8 | Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in |
CVE-2011-1091
|
| VCID-7fz8-kr7a-xqfb | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2368
|
| VCID-7u2r-rnyz-uyd5 | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2375
|
| VCID-83az-td85-sudb | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2380
|
| VCID-8951-ngtt-pfb5 | pidgin: Improper validation of incoming plaintext messages in MSN protocol plug-in |
CVE-2012-2318
|
| VCID-8a4f-csqh-53fu | gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185. |
CVE-2013-6486
|
| VCID-9btk-pnjv-1qgb | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2367
|
| VCID-9hw9-a9yt-p7fv | Multiple vulnerabilities have been discovered in Pidgin, allowing for remote arbitrary code execution, Denial of Service and service spoofing. |
CVE-2008-2957
|
| VCID-9npz-w7g5-r3b5 | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2370
|
| VCID-9sg6-dv5z-sbfq | Multiple vulnerabilities have been discovered in Pidgin, allowing for remote arbitrary code execution, Denial of Service and service spoofing. |
CVE-2008-2955
|
| VCID-ach7-fhrx-zqd3 | (libpurple): Invalid UTF-8 string handling in OSCAR messages |
CVE-2011-4601
|
| VCID-ag3e-ee6x-tbcv | Multiple vulnerabilities have been discovered in Pidgin, allowing for remote arbitrary code execution, Denial of Service and service spoofing. |
CVE-2008-3532
|
| VCID-b7pa-sgwm-cbea | pidgin: Finch XMPP MUC Crash |
CVE-2010-0420
|
| VCID-b8e9-rkt5-cfch | Multiple vulnerabilities have been discovered in Pidgin, leading to the remote execution of arbitrary code, unauthorized information disclosure, or Denial of Service. |
CVE-2009-3026
|
| VCID-b8zp-g4xa-t7ad | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6481
|
| VCID-bqxx-44k8-t7fd | security update |
CVE-2014-3698
|
| VCID-ca59-9ma2-nyek | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2371
|
| VCID-cd64-6y6b-rfa3 | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2374
|
| VCID-cmm5-mw5m-bud2 | A vulnerability in Pidgin might allow remote attackers to execute arbitrary code. |
CVE-2017-2640
|
| VCID-cxh3-6xaf-q7fa | pidgin: Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests |
CVE-2012-2214
|
| VCID-dw47-rgd5-yked | Pidgin: MSN DirectConnect DoS (crash) after receiving a short P2P message |
CVE-2010-4528
|
| VCID-ebg2-bj5n-tycb | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6490
|
| VCID-ektc-z3zf-dfep | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-0272
|
| VCID-et2z-svg6-m3ef | pidgin: Remote crash in MSN protocol plugin |
CVE-2011-3184
|
| VCID-ftdp-6cub-sqah | Pidgin: MSN SLP emoticon DoS (NULL pointer dereference) |
CVE-2010-1624
|
| VCID-g8q8-pb2g-qfct | Multiple vulnerabilities have been discovered in Pidgin, leading to the remote execution of arbitrary code, unauthorized information disclosure, or Denial of Service. |
CVE-2009-1889
|
| VCID-gmc8-mf63-x7fs | pidgin: Crash in IRC protocol plug-in by listing set of users (/who command) upon session startup |
CVE-2011-2943
|
| VCID-j7ap-11qk-ufeb | Multiple vulnerabilities have been discovered in Pidgin, leading to the remote execution of arbitrary code, unauthorized information disclosure, or Denial of Service. |
CVE-2009-2694
|
| VCID-jb3a-ydyh-sfft | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6479
|
| VCID-jrfq-eubr-hfa9 | The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name. |
CVE-2009-3084
|
| VCID-ksp5-2txt-vucn | Multiple vulnerabilities in Pidgin might allow for the remote execution of arbitrary code or a Denial of Service. |
CVE-2009-1375
|
| VCID-kt42-hfwm-7ubh | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2365
|
| VCID-mhjx-yrdy-5qf6 | pidgin: NULL pointer dereference in the XMPP protocol plug-in by renaming user name |
CVE-2011-4939
|
| VCID-mjen-7k79-vyd4 | gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message. |
CVE-2011-3185
|
| VCID-myh5-wcpe-zbac | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2372
|
| VCID-nhj7-agfp-rue8 | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2376
|
| VCID-nvtc-a3b6-23bs | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-0274
|
| VCID-nxhy-m3bd-6qab | security update |
CVE-2014-3694
|
| VCID-p1gr-bcnk-pkg7 | pidgin: ICQ X-Status denial of service (NULL deref) |
CVE-2010-2528
|
| VCID-p8dm-3wjm-8bgd | Pidgin: NULL pointer dereference by processing a custom smiley (DoS) |
CVE-2009-3085
|
| VCID-q5v4-yz4d-yydy | A buffer overflow in Pidgin might allow remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2012-3374
|
| VCID-qhab-ydb4-b7gq | Multiple vulnerabilities have been discovered in Pidgin, allowing for remote arbitrary code execution, Denial of Service and service spoofing. |
CVE-2008-2927
|
| VCID-r5z8-wmea-a7by | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2378
|
| VCID-rzq7-5psb-dygh | Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS) |
CVE-2009-3083
|
| VCID-s4gw-ntgc-5bad | Multiple vulnerabilities in Pidgin might allow for the remote execution of arbitrary code or a Denial of Service. |
CVE-2009-1374
|
| VCID-sap1-hcpz-a7dm | libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996. |
CVE-2007-4999
|
| VCID-stg3-h3jz-wfa9 | MSN nudges sent from unknown buddies can cause libpurple to crash |
CVE-2007-4996
|
| VCID-stm8-xdkh-7bdf | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6485
|
| VCID-tsth-71zg-n3g7 | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6489
|
| VCID-ua4g-zzrd-eyhb | Multiple vulnerabilities in Pidgin might allow for the remote execution of arbitrary code or a Denial of Service. |
CVE-2009-1373
|
| VCID-uf3q-52zp-p3bk | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2377
|
| VCID-vc51-jjp7-v7gb | pidgin MSN protocol plugin memory corruption |
CVE-2010-0277
|
| VCID-vczt-sf85-uyfc | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-1000030
|
| VCID-vmjg-nj4a-8uby | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-4323
|
| VCID-vu3h-hcpa-8ubp | Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme. |
CVE-2014-3697
|
| VCID-whc9-ffhd-j3b6 | pidgin: Client abort in the MSN protocol plug-in by attempt to display certain, not UTF-8 encoded text |
CVE-2012-1178
|
| VCID-wprn-gtbj-ukgf | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-6478
|
| VCID-x5c5-b5s8-bbe1 | Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM. |
CVE-2009-3025
|
| VCID-xekx-jf8h-93hy | Cipher API information disclosure in pidgin |
CVE-2011-4922
|
| VCID-xgfd-ykfk-33dh | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2373
|
| VCID-y3ke-yqy2-bbey | Multiple vulnerabilities in Pidgin may allow execution of arbitrary code. |
CVE-2013-0271
|
| VCID-ym5e-f9a1-ufdz | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2369
|
| VCID-ypkz-jxvb-9fgd | Multiple vulnerabilities have been discovered in Pidgin, leading to the remote execution of arbitrary code, unauthorized information disclosure, or Denial of Service. |
CVE-2009-1376
|
| VCID-zamj-2ej2-qke5 | Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code. |
CVE-2016-2366
|