[funsec] Fwd: [Full-disclosure] ZDI-08-054: Multiple Vendor libpur ple MSN Protocol SLP Message Heap Overflow Vulnerability

[James Matthews]

Also www.meebo.com

On Thu, Aug 28, 2008 at 2:11 PM, Paul Ferguson <fergdawg at netzero.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> - -- Gadi Evron <ge at linuxbox.org> wrote:
>
> >That's huge.
> >
> >I just disabled MSN.
> >
>
> I'm wondering if other platforms are affected by this, as well
> (e.g. Trillian, native MSN Messenger, etc.) or just Adiumx and
> Pidgin?
>
> http://www.zerodayinitiative.com/advisories/ZDI-08-054/
>
> - - ferg
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.6.3 (Build 3017)
>
> wj8DBQFItxSXq1pz9mNUZTMRAi6YAKD+N47CR9rpgXvrfvoyXq6cWRuWJwCfQiDd
> zIKn4kMGjVErSOB4qdokUp4=
> =LImp
> -----END PGP SIGNATURE-----
>
>
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet
>  fergdawg(at)netzero.net
>  ferg's tech blog: http://fergdawg.blogspot.com/
>
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.
>



-- 
http://www.goldwatches.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://linuxbox.org/pipermail/funsec/attachments/20080828/501a415a/attachment.htm