PT-2005-2887 · Gaim+1 · Gaim+1

Hugo De Bokkenrijder · Published 2005-05-19 · Updated 2018-10-19 · CVE-2005-1934

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Gaim versions prior to 1.3.1

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a malformed MSN message. This message leads to a memory allocation of a large size, possibly due to an integer signedness error.

Recommendations For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-1934

DSA-734-1

RHSA-2005_518

Affected Products

Gaim

Red Hat

References · 14

• http://novell.com/linux/security/advisories/2005_36_sudo.html · Vendor Advisory
• http://debian.org/security/2005/dsa-734 · Vendor Advisory
• http://securityfocus.com/archive/1/426078/100/0/threaded · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:099 · Vendor Advisory
• http://sourceforge.net/tracker/index.php?func=detail&aid=1205290&group_id=235&atid=100235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1934 · Security Note
• http://security.gentoo.org/glsa/glsa-200506-11.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-518.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-1269.html · Note
• https://rhn.redhat.com/errata/RHSA-2005-518.html · Note
• https://redhat.com/security/data/cve/CVE-2005-1934.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A263 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10368 · Note
• http://securityfocus.com/bid/13932 · Note