PT-2005-5358 · Unknown · Gaim-Encryption

Joerg Kurlbaum · Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4693

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Gaim-Encryption version 2.38-1

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a crafted message from an ICQ buddy. This might involve the GE received key function in keys.c.

Recommendations For Gaim-Encryption version 2.38-1, consider disabling the GE received key function in keys.c as a temporary workaround until a patch is available. Restrict access to ICQ buddy messages to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4693

Produtos afetados

Gaim-Encryption

Referências · 4

• http://osvdb.org/21233 · Nota
• http://secunia.com/advisories/17739 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4693 · Nota de Segurança
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127 · Nota