Novell Home

CVE-2012-3374

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2012-3374 at MITRE

Description

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.

NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 770304

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for x86
  • finch >= 2.6.6-0.18.1
  • libpurple >= 2.6.6-0.18.1
  • pidgin >= 2.6.6-0.18.1
Builds
ZYPP Patch Nr: 8220
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries
SLE SDK 10 SP4 for IBM zSeries
SLE SDK 10 SP4 for IPF
SLE SDK 10 SP4 for X86-64
SLE SDK 10 SP4 for x86
  • finch >= 2.6.6-0.18.1
  • finch-devel >= 2.6.6-0.18.1
  • libpurple >= 2.6.6-0.18.1
  • libpurple-devel >= 2.6.6-0.18.1
  • pidgin >= 2.6.6-0.18.1
  • pidgin-devel >= 2.6.6-0.18.1
Builds
ZYPP Patch Nr: 8220
SUSE Linux Enterprise Software Development Kit 11 SP1
SUSE Linux Enterprise Software Development Kit 11 SP2
  • finch >= 2.6.6-0.17.1
  • finch-devel >= 2.6.6-0.17.1
  • libpurple >= 2.6.6-0.17.1
  • libpurple-devel >= 2.6.6-0.17.1
  • libpurple-lang >= 2.6.6-0.17.1
  • pidgin >= 2.6.6-0.17.1
  • pidgin-devel >= 2.6.6-0.17.1
Builds
SAT Patch Nr: 6534
SUSE Linux Enterprise Desktop 11 SP1
SUSE Linux Enterprise Desktop 11 SP2
  • finch >= 2.6.6-0.17.1
  • libpurple >= 2.6.6-0.17.1
  • libpurple-lang >= 2.6.6-0.17.1
  • libpurple-meanwhile >= 2.6.6-0.17.1
  • libpurple-tcl >= 2.6.6-0.17.1
  • pidgin >= 2.6.6-0.17.1
Builds
SAT Patch Nr: 6534

© 2014 Novell