10
CVSSv2

CVE-2004-0891

Published: 27/01/2005 Updated: 11/10/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.

Vulnerable Product Search on Vulmon Subscribe to Product

rob flynn gaim 0.10

rob flynn gaim 0.55

rob flynn gaim 0.56

rob flynn gaim 0.62

rob flynn gaim 0.63

rob flynn gaim 0.64

rob flynn gaim 0.71

rob flynn gaim 0.72

rob flynn gaim 1.0

rob flynn gaim 1.0.1

rob flynn gaim 0.53

rob flynn gaim 0.54

rob flynn gaim 0.60

rob flynn gaim 0.61

rob flynn gaim 0.69

rob flynn gaim 0.70

rob flynn gaim 0.82

rob flynn gaim 0.82.1

rob flynn gaim 0.10.3

rob flynn gaim 0.50

rob flynn gaim 0.57

rob flynn gaim 0.58

rob flynn gaim 0.65

rob flynn gaim 0.66

rob flynn gaim 0.73

rob flynn gaim 0.74

rob flynn gaim 0.51

rob flynn gaim 0.52

rob flynn gaim 0.59

rob flynn gaim 0.59.1

rob flynn gaim 0.67

rob flynn gaim 0.68

rob flynn gaim 0.75

rob flynn gaim 0.78

ubuntu ubuntu linux 4.1

slackware slackware linux 9.0

slackware slackware linux 9.1

slackware slackware linux current

gentoo linux

gentoo linux 1.4

slackware slackware linux 10.0

Vendor Advisories

Synopsis gaim security update Type/Severity Security Advisory: Important Topic An updated gaim package that fixes security issues, fixes various bugs, andincludes various enhancements for Red Hat Enterprise Linux 3 is now avaliable Description The gaim application is a multi-protocol insta ...