| Secunia ID |
SA50023
|
| CVE-ID |
CVE-2012-1178
|
| Release Date |
24 Jul 2012
|
| Criticality |
Not Critical
Typically used for very limited privilege escalation vulnerabilities and locally exploitable Denial of Service vulnerabilities.
This rating is also used for non-sensitive system information disclosure vulnerabilities (e.g. remote disclosure of installation path of applications).
|
| Solution Status |
Vendor Patch
|
| Where |
From remote
"From remote" describes other vulnerabilities where the attack vector doesn't require access to the system or a local network.
This category covers services that are acceptable to expose to the Internet (e.g. HTTP, HTTPS, SMTP). It also covers client applications used on the Internet and certain vulnerabilities where it is reasonable to assume that a security conscious user can be tricked into performing certain actions.
|
| Impact |
DoS (Denial of Service)
This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.
|
| Description |
SUSE has issued an update for pidgin. This fixes a weakness, which can be exploited by malicious people to cause a DoS (Denial of Service). For more information see vulnerability #2 in: SA48303
|
| Solution |
Apply updated packages via the zypper package manager.
|
| Original Advisory |
openSUSE-SU-2012:0905-1: http://lists.opensuse.org/opensuse-updates/2012-07/msg00041.html
|