hugo/content/about/security/advisories/cve-2010-0420-00.md@6532ddaa3587
hugo/content/about/security/advisories/cve-2010-0420-00.md
Sun, 10 Nov 2024 00:47:44 -0600
- author
- Gary Kramlich <grim@reaperworld.com>
- date
- Sun, 10 Nov 2024 00:47:44 -0600
- changeset 544
- 6532ddaa3587
- parent 397
- 56acee7044a0
- permissions
- -rw-r--r--
Add EionRobb's ChatGPT protocol plugin and update the signal protocol plugins
Testing Done:
Ran `npm run hugo:server` and verified it locally.
Reviewed at https://reviews.imfreedom.org/r/3649/
--- title: cve-2010-0420-00 date: 2010-02-18T00:00:00.000Z cveNumber: cve-2010-0420 summary: Finch XMPP MUC crash discoveredBy: Sadrul Habib Chowdhury fixedInRelease: 2.6.6 type: security layout: cve hidden: true --- ### Description If a user in a multi-user chat room has a nickname containing '<br>' then libpurple ends up having two users with username ' ' in the room, and Finch crashes in this situation. We do not believe there is a possibility of remote code execution. ### Mitigation Correctly parse '<br>' so that it appears literally rather than as ' '.
