PT-2005-5358 · Unknown · Gaim-Encryption

Joerg Kurlbaum · Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4693

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Gaim-Encryption version 2.38-1

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a crafted message from an ICQ buddy. This might involve the GE received key function in keys.c.

Recommendations For Gaim-Encryption version 2.38-1, consider disabling the GE received key function in keys.c as a temporary workaround until a patch is available. Restrict access to ICQ buddy messages to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4693

Affected Products

Gaim-Encryption

References · 4

• http://secunia.com/advisories/17739 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4693 · Security Note
• http://osvdb.org/21233 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127 · Note