10

CVE-2004-0891

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rob Flynn ≫ Gaim Version 0.10
Rob Flynn ≫ Gaim Version 0.10.3
Rob Flynn ≫ Gaim Version 0.50
Rob Flynn ≫ Gaim Version 0.51
Rob Flynn ≫ Gaim Version 0.52
Rob Flynn ≫ Gaim Version 0.53
Rob Flynn ≫ Gaim Version 0.54
Rob Flynn ≫ Gaim Version 0.55
Rob Flynn ≫ Gaim Version 0.56
Rob Flynn ≫ Gaim Version 0.57
Rob Flynn ≫ Gaim Version 0.58
Rob Flynn ≫ Gaim Version 0.59
Rob Flynn ≫ Gaim Version 0.59.1
Rob Flynn ≫ Gaim Version 0.60
Rob Flynn ≫ Gaim Version 0.61
Rob Flynn ≫ Gaim Version 0.62
Rob Flynn ≫ Gaim Version 0.63
Rob Flynn ≫ Gaim Version 0.64
Rob Flynn ≫ Gaim Version 0.65
Rob Flynn ≫ Gaim Version 0.66
Rob Flynn ≫ Gaim Version 0.67
Rob Flynn ≫ Gaim Version 0.68
Rob Flynn ≫ Gaim Version 0.69
Rob Flynn ≫ Gaim Version 0.70
Rob Flynn ≫ Gaim Version 0.71
Rob Flynn ≫ Gaim Version 0.72
Rob Flynn ≫ Gaim Version 0.73
Rob Flynn ≫ Gaim Version 0.74
Rob Flynn ≫ Gaim Version 0.75
Rob Flynn ≫ Gaim Version 0.78
Rob Flynn ≫ Gaim Version 0.82
Rob Flynn ≫ Gaim Version 0.82.1
Rob Flynn ≫ Gaim Version 1.0
Rob Flynn ≫ Gaim Version 1.0.1
Gentoo ≫ Linux Version 1.4
Slackware ≫ Slackware Linux Version 9.0
Slackware ≫ Slackware Linux Version 9.1
Slackware ≫ Slackware Linux Version 10.0
Slackware ≫ Slackware Linux Version current
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ia64
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ppc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.86% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://gaim.sourceforge.net/security/?id=9
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml
http://www.redhat.com/support/errata/RHSA-2004-604.html
Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=2188
https://exchange.xforce.ibmcloud.com/vulnerabilities/17786
https://exchange.xforce.ibmcloud.com/vulnerabilities/17787
https://exchange.xforce.ibmcloud.com/vulnerabilities/17790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790
https://www.ubuntu.com/usn/usn-8-1/