Oval Definition:	oval:org.mitre.oval:def:23485
Revision Date: 2014-05-26 Version: 14 Title: ELSA-2010:0890: pidgin security update (Moderate) Description: libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2010-3711 ELSA-2010:0890-01 Platform(s): Oracle Linux 6 Product(s): pidgin Definition Synopsis Oracle Linux 6.x AND rpm test pidgin-docs is earlier than 0:2.6.6-6.el6_0 OR libpurple-tcl is earlier than 0:2.6.6-6.el6_0 OR pidgin-perl is earlier than 0:2.6.6-6.el6_0 OR libpurple is earlier than 0:2.6.6-6.el6_0 OR libpurple-perl is earlier than 0:2.6.6-6.el6_0 OR finch-devel is earlier than 0:2.6.6-6.el6_0 OR finch is earlier than 0:2.6.6-6.el6_0 OR libpurple-devel is earlier than 0:2.6.6-6.el6_0 OR pidgin-devel is earlier than 0:2.6.6-6.el6_0 OR pidgin is earlier than 0:2.6.6-6.el6_0
BACK