Search for packages
Package details: pkg:deb/debian/mcabber@0.8.3-1
purl pkg:deb/debian/mcabber@0.8.3-1
Next non-vulnerable version 1.0.4-1.1
Latest non-vulnerable version 1.0.4-1.1
Risk 3.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-8dyd-depr-aaam
Aliases:
CVE-2009-3560
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
0.10.0-1+squeeze1
Affected by 2 other vulnerabilities.
VCID-c7e7-cdc7-aaam
Aliases:
CVE-2009-3720
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
0.10.0-1+squeeze1
Affected by 2 other vulnerabilities.
VCID-nq93-zvcm-aaag
Aliases:
CVE-2017-5604
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4.
1.0.4-1.1
Affected by 0 other vulnerabilities.
VCID-zzxx-ws55-aaaq
Aliases:
CVE-2016-9928
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets.
1.0.4-1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:27:28.714534+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:09:36.705897+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T15:40:18.617938+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:28:01.810268+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:04:07.374243+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:19:01.381168+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-20T23:27:15.539817+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag None 36.1.3
2025-06-20T23:14:23.409990+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam None 36.1.3
2025-06-20T22:55:58.624780+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq None 36.1.3
2025-06-20T22:48:31.684247+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam None 36.1.3
2025-06-08T13:17:34.891543+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:58:02.091070+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:41:02.812564+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T08:34:31.288402+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:22:35.497653+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:12:22.607054+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T04:42:58.287142+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T16:50:10.709645+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag None 36.1.0
2025-06-07T16:37:29.736353+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam None 36.1.0
2025-06-07T16:19:14.682160+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq None 36.1.0
2025-06-07T16:12:22.934591+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam None 36.1.0
2025-04-12T22:07:54.987234+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:05:35.460872+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:40:46.260991+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:22:48.072813+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T07:05:55.795886+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:53:55.996685+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:43:19.848045+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:14:00.239582+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T15:22:56.007273+00:00 Debian Oval Importer Affected by VCID-nq93-zvcm-aaag None 36.0.0
2025-04-07T15:09:42.301054+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam None 36.0.0
2025-04-07T14:50:54.196410+00:00 Debian Oval Importer Affected by VCID-zzxx-ws55-aaaq None 36.0.0
2025-04-07T14:43:47.643856+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam None 36.0.0
2024-11-27T09:26:06.083699+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-27T08:15:23.838657+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-13T05:02:51.195708+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-13T04:13:10.903011+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-09-20T20:29:41.472869+00:00 Debian Oval Importer Affected by VCID-c7e7-cdc7-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T20:12:05.544515+00:00 Debian Oval Importer Affected by VCID-8dyd-depr-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1