Oval Definition:	oval:org.mitre.oval:def:22964
Revision Date: 2014-05-26 Version: 20 Title: ELSA-2010:0788: pidgin security update (Moderate) Description: libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2010-1624 CVE-2010-3711 ELSA-2010:0788-01 Platform(s): Oracle Linux 5 Product(s): pidgin Definition Synopsis Oracle Linux 5.x AND rpm test libpurple-perl is earlier than 0:2.6.6-5.el5_5 OR finch is earlier than 0:2.6.6-5.el5_5 OR libpurple is earlier than 0:2.6.6-5.el5_5 OR pidgin is earlier than 0:2.6.6-5.el5_5 OR pidgin-perl is earlier than 0:2.6.6-5.el5_5 OR libpurple-devel is earlier than 0:2.6.6-5.el5_5 OR pidgin-devel is earlier than 0:2.6.6-5.el5_5 OR finch-devel is earlier than 0:2.6.6-5.el5_5 OR libpurple-tcl is earlier than 0:2.6.6-5.el5_5
BACK