PT-2004-1238 · Yahoo+1 · Ymsg+1
Stefan Esser
·
Publicado
2004-01-29
·
Atualizado
2017-10-11
·
CVE-2004-0007
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Gaim versions 0.74 and earlier
Ultramagnetic versions prior to 0.81
Description
A buffer overflow issue exists in the Extract Info Field Function for MSN and YMSG protocol handlers, potentially allowing remote attackers to cause a denial of service or execute arbitrary code.
Recommendations
For Gaim versions 0.74 and earlier, update to a version later than 0.74 to resolve the issue.
For Ultramagnetic versions prior to 0.81, update to version 0.81 or later to fix the problem.
As a temporary workaround, consider disabling the Extract Info Field Function for MSN and YMSG protocol handlers until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Msn
Ymsg