CVE

Id
43004  
CVE No.
CVE-2010-0420  
Status
Candidate  
Description
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing <br> sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468779 43004 CVE-2010-0420 CONFIRM:http://developer.pidgin.im/wiki/ChangeLog  View
468780 43004 CVE-2010-0420 CONFIRM:http://pidgin.im/news/security/?id=44  View
468781 43004 CVE-2010-0420 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=565786  View
468782 43004 CVE-2010-0420 DEBIAN:DSA-2038  View
468783 43004 CVE-2010-0420 URL:http://www.debian.org/security/2010/dsa-2038  View
468784 43004 CVE-2010-0420 FEDORA:FEDORA-2010-1279  View
468785 43004 CVE-2010-0420 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html  View
468786 43004 CVE-2010-0420 FEDORA:FEDORA-2010-1383  View
468787 43004 CVE-2010-0420 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html  View
468788 43004 CVE-2010-0420 FEDORA:FEDORA-2010-1934  View
468789 43004 CVE-2010-0420 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html  View
468790 43004 CVE-2010-0420 MANDRIVA:MDVSA-2010:041  View
468791 43004 CVE-2010-0420 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:041  View
468792 43004 CVE-2010-0420 MANDRIVA:MDVSA-2010:085  View
468793 43004 CVE-2010-0420 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:085  View
468794 43004 CVE-2010-0420 REDHAT:RHSA-2010:0115  View
468795 43004 CVE-2010-0420 URL:https://rhn.redhat.com/errata/RHSA-2010-0115.html  View
468796 43004 CVE-2010-0420 SUSE:SUSE-SR:2010:006  View
468797 43004 CVE-2010-0420 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html  View
468798 43004 CVE-2010-0420 UBUNTU:USN-902-1  View
468799 43004 CVE-2010-0420 URL:http://www.ubuntu.com/usn/USN-902-1  View
468800 43004 CVE-2010-0420 BID:38294  View
468801 43004 CVE-2010-0420 URL:http://www.securityfocus.com/bid/38294  View
468802 43004 CVE-2010-0420 OSVDB:62439  View
468803 43004 CVE-2010-0420 URL:http://www.osvdb.org/62439  View
468804 43004 CVE-2010-0420 OVAL:oval:org.mitre.oval:def:11485  View
468805 43004 CVE-2010-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11485  View
468806 43004 CVE-2010-0420 OVAL:oval:org.mitre.oval:def:18230  View
468807 43004 CVE-2010-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18230  View
468808 43004 CVE-2010-0420 SECUNIA:38563  View
468809 43004 CVE-2010-0420 URL:http://secunia.com/advisories/38563  View
468810 43004 CVE-2010-0420 SECUNIA:38640  View
468811 43004 CVE-2010-0420 URL:http://secunia.com/advisories/38640  View
468812 43004 CVE-2010-0420 SECUNIA:38658  View
468813 43004 CVE-2010-0420 URL:http://secunia.com/advisories/38658  View
468814 43004 CVE-2010-0420 SECUNIA:38712  View
468815 43004 CVE-2010-0420 URL:http://secunia.com/advisories/38712  View
468816 43004 CVE-2010-0420 SECUNIA:38915  View
468817 43004 CVE-2010-0420 URL:http://secunia.com/advisories/38915  View
468818 43004 CVE-2010-0420 SECUNIA:39509  View
468819 43004 CVE-2010-0420 URL:http://secunia.com/advisories/39509  View
468820 43004 CVE-2010-0420 VUPEN:ADV-2010-0413  View
468821 43004 CVE-2010-0420 URL:http://www.vupen.com/english/advisories/2010/0413  View
468822 43004 CVE-2010-0420 VUPEN:ADV-2010-1020  View
468823 43004 CVE-2010-0420 URL:http://www.vupen.com/english/advisories/2010/1020  View
468824 43004 CVE-2010-0420 VUPEN:ADV-2010-0914  View
468825 43004 CVE-2010-0420 URL:http://www.vupen.com/english/advisories/2010/0914  View
468826 43004 CVE-2010-0420 XF:pidgin-xmpp-nickname-dos(56399)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38024 JVNDB-2010-003809 cronie および Vixie cron の edit_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性 (1) cronie および (2) Vixie cron (vixie-cron) の crontab.c の edit_cmd 関数には、任意のファイルの編集時間を変更し、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0424 43004 3.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003809.html  View