CVE-2005-2103 Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a l...
CriticalCVSS 9.8
EPSS 16.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gaim project gaim | < 1.5.0 | 1.5.0 |
References
- gaim.sourceforge.net broken-link
- SUSE-SR:2005:019 broken-link vendor-advisory
- RHSA-2005:589 broken-link vendor-advisory
- RHSA-2005:627 broken-link vendor-advisory
- FLSA:158543 broken-link third-party-advisory vdb-entry vendor-advisory
- 14531 broken-link third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11477 broken-link signature vdb-entry
- USN-168-1 broken-link vendor-advisory