5
CVSSv2

CVE-2005-0472

Published: 14/03/2005 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Gaim prior to 1.1.3 allows remote malicious users to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rob flynn gaim 1.1.1

rob flynn gaim 1.1.2

rob flynn gaim 1.0

rob flynn gaim 1.0.1

mandrakesoft mandrake linux 10.1

redhat enterprise linux 4.0

mandrakesoft mandrake linux corporate server 3.0

mandrakesoft mandrake linux 10.0

redhat enterprise linux desktop 4.0

Vendor Advisories

The Gaim developers discovered that the HTML parser did not sufficiently validate its input This allowed a remote attacker to crash the Gaim client by sending certain malformed HTML messages (CAN-2005-0208, CAN-2005-0473) ...
Synopsis gaim security update Type/Severity Security Advisory: Critical Topic An updated gaim package that fixes security issues is now available for RedHat Enterprise Linux 21This update has been rated as having critical security impact by the RedHat Security Response Team Description T ...
Synopsis gaim security update Type/Severity Security Advisory: Important Topic An updated gaim package that fixes various security issues as well as anumber of bugs is now availableThis update has been rated as having important security impact by the RedHat Security Response Team Description ...
It has been discovered that certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim, a multi-protocol instant messaging client, and hence lead to a denial of service of the client Two more denial of service conditions have been discovered in newer versions of Gaim which are fixed in the package in sid but ...