Lucene search

K
freebsdFreeBSD4260EACB-26B8-11D9-9289-000C41E2CDAD
HistoryAug 26, 2004 - 12:00 a.m.

gaim -- multiple buffer overflows

2004-08-2600:00:00
vuxml.freebsd.org
15

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.7%

Sean infamous42md reports several situations in gaim
that may result in exploitable buffer overflows:

Rich Text Format (RTF) messages in Novell GroupWise
protocol
Unsafe use of gethostbyname in zephyr protocol
URLs which are over 2048 bytes long once decoded

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.7%

Related for 4260EACB-26B8-11D9-9289-000C41E2CDAD