Lucene search

K
freebsdFreeBSD1E6C4008-245F-11D9-B584-0050FC56D258
HistoryOct 19, 2004 - 12:00 a.m.

gaim -- buffer overflow in MSN protocol support

2004-10-1900:00:00
vuxml.freebsd.org
9

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.088 Low

EPSS

Percentile

94.6%

Due to a buffer overflow in the MSN protocol support for
gaim 0.79 to 1.0.1, it is possible for remote clients to do a
denial-of-service attack on the application.
This is caused by an unbounded copy operation, which writes
to the wrong buffer.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.088 Low

EPSS

Percentile

94.6%