(RHSA-2005:589) gaim security update

2005-08-0900:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.641 Medium

EPSS

Percentile

97.5%

JSON

Gaim is an Internet Instant Messaging client.

A heap based buffer overflow issue was discovered in the way Gaim processes
away messages. A remote attacker could send a specially crafted away
message to a Gaim user logged into AIM or ICQ which could result in
arbitrary code execution. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2103 to this issue.

Users of gaim are advised to upgrade to this updated package, which
contains backported patches and is not vulnerable to this issue.

OSVersionArchitecturePackageVersionFilename
RedHat2i386gaim< 0.59.9-5.el2gaim-0.59.9-5.el2.i386.rpm
RedHat2ia64gaim< 0.59.9-5.el2gaim-0.59.9-5.el2.ia64.rpm