CVE-2004-0891 Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected seque...
HighCVSS 10.0
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rob flynn gaim | = 0.10 | No fix listed |
| rob flynn gaim | = 0.10.3 | No fix listed |
| rob flynn gaim | = 0.50 | No fix listed |
| rob flynn gaim | = 0.51 | No fix listed |
| rob flynn gaim | = 0.52 | No fix listed |
| rob flynn gaim | = 0.53 | No fix listed |
| rob flynn gaim | = 0.54 | No fix listed |
| rob flynn gaim | = 0.55 | No fix listed |
| rob flynn gaim | = 0.56 | No fix listed |
| rob flynn gaim | = 0.57 | No fix listed |
| rob flynn gaim | = 0.58 | No fix listed |
| rob flynn gaim | = 0.59 | No fix listed |
| rob flynn gaim | = 0.59.1 | No fix listed |
| rob flynn gaim | = 0.60 | No fix listed |
| rob flynn gaim | = 0.61 | No fix listed |
| rob flynn gaim | = 0.62 | No fix listed |
| rob flynn gaim | = 0.63 | No fix listed |
| rob flynn gaim | = 0.64 | No fix listed |
| rob flynn gaim | = 0.65 | No fix listed |
| rob flynn gaim | = 0.66 | No fix listed |
| rob flynn gaim | = 0.67 | No fix listed |
| rob flynn gaim | = 0.68 | No fix listed |
| rob flynn gaim | = 0.69 | No fix listed |
| rob flynn gaim | = 0.70 | No fix listed |
| rob flynn gaim | = 0.71 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rob flynn gaim | = 0.72 | No fix listed |
| rob flynn gaim | = 0.73 | No fix listed |
| rob flynn gaim | = 0.74 | No fix listed |
| rob flynn gaim | = 0.75 | No fix listed |
| rob flynn gaim | = 0.78 | No fix listed |
| rob flynn gaim | = 0.82 | No fix listed |
| rob flynn gaim | = 0.82.1 | No fix listed |
| rob flynn gaim | = 1.0 | No fix listed |
| rob flynn gaim | = 1.0.1 | No fix listed |
| gentoo linux | All versions | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| slackware linux | = 9.0 | No fix listed |
| slackware linux | = 9.1 | No fix listed |
| slackware linux | = 10.0 | No fix listed |
| slackware linux | = current | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
References
- gaim.sourceforge.net vendor-advisory
- GLSA-200410-23 vendor-advisory
- RHSA-2004:604 vendor-advisory
- FLSA:2188 vendor-advisory
- gaim-msn-slp-bo(17786) vdb-entry
- gaim-msn-slp-dos(17787) vdb-entry
- gaim-file-transfer-dos(17790) vdb-entry
- oval:org.mitre.oval:def:11790 signature vdb-entry
- USN-8-1 vendor-advisory