7.5
CVSSv2

CVE-2004-0500

Published: 28/09/2004 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim prior to 0.82 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.

Vulnerable Product Search on Vulmon Subscribe to Product

rob flynn gaim 0.10.3

rob flynn gaim 0.50

rob flynn gaim 0.57

rob flynn gaim 0.58

rob flynn gaim 0.64

rob flynn gaim 0.65

rob flynn gaim 0.73

rob flynn gaim 0.74

rob flynn gaim 0.53

rob flynn gaim 0.54

rob flynn gaim 0.60

rob flynn gaim 0.61

rob flynn gaim 0.68

rob flynn gaim 0.69

rob flynn gaim 0.70

rob flynn gaim 0.10

rob flynn gaim 0.55

rob flynn gaim 0.56

rob flynn gaim 0.62

rob flynn gaim 0.63

rob flynn gaim 0.71

rob flynn gaim 0.72

rob flynn gaim 0.51

rob flynn gaim 0.52

rob flynn gaim 0.59

rob flynn gaim 0.59.1

rob flynn gaim 0.66

rob flynn gaim 0.67

rob flynn gaim 0.75

mandrakesoft mandrake linux 9.2

gentoo linux 1.4

mandrakesoft mandrake linux 10.0

Vendor Advisories

Synopsis gaim security update Type/Severity Security Advisory: Critical Topic An updated gaim package that fixes several security issues is now available Description Gaim is an instant messenger client that can handle multiple protocolsBuffer overflow bugs were found in the Gaim MSN proto ...