PT-2004-1857 · Gaim · Gaim

Published 2004-09-02 · Updated 2017-10-11 · CVE-2004-0785

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gaim versions prior to 0.82

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service and possibly the execution of arbitrary code. This can occur through various means, including Rich Text Format (RTF) messages, a long hostname for the local system as obtained from DNS, or a long URL that is not properly handled by the URL decoder.

Recommendations For versions prior to 0.82, update to version 0.82 or later to resolve the issue. As a temporary workaround, consider restricting the handling of RTF messages and limiting the length of hostnames and URLs to prevent potential exploitation.

Fix

Related Identifiers

CVE-2004-0785

Affected Products

Gaim

References · 21

• http://fedoranews.org/updates/FEDORA-2004-278.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0785 · Security Note
• http://fedoranews.org/updates/FEDORA-2004-279.shtml · Vendor Advisory
• http://gaim.sourceforge.net/security/?id=3 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200408-27.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-400.html · Vendor Advisory
• http://osvdb.org/9261 · Note
• http://securitytracker.com/id?1011083 · Note
• http://secunia.com/advisories/13101 · Note
• http://osvdb.org/9262 · Note
• http://gaim.sourceforge.net/security/?id=4 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907 · Note
• http://gaim.sourceforge.net/security/?id=5 · Note
• http://secunia.com/advisories/12480 · Note
• http://securityfocus.com/bid/11056 · Note