PT-2004-1857 · Gaim · Gaim

Publicado 2004-09-02 · Atualizado 2017-10-11 · CVE-2004-0785

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gaim versions prior to 0.82

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service and possibly the execution of arbitrary code. This can occur through various means, including Rich Text Format (RTF) messages, a long hostname for the local system as obtained from DNS, or a long URL that is not properly handled by the URL decoder.

Recommendations For versions prior to 0.82, update to version 0.82 or later to resolve the issue. As a temporary workaround, consider restricting the handling of RTF messages and limiting the length of hostnames and URLs to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2004-0785

Produtos afetados

Gaim

Referências · 21

• http://osvdb.org/9261 · Nota
• http://securitytracker.com/id?1011083 · Nota
• http://secunia.com/advisories/13101 · Nota
• http://fedoranews.org/updates/FEDORA-2004-278.shtml · Aviso do Fabricante
• http://osvdb.org/9262 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0785 · Nota de Segurança
• http://gaim.sourceforge.net/security/?id=4 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907 · Nota
• http://gaim.sourceforge.net/security/?id=5 · Nota
• http://secunia.com/advisories/12480 · Nota
• http://fedoranews.org/updates/FEDORA-2004-279.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/11056 · Nota
• http://gaim.sourceforge.net/security/?id=3 · Aviso do Fabricante
• http://secunia.com/advisories/12929 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17142 · Nota