CVE-2005-2102

The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash via a filename that contains invalid UTF-8 characters...

CVE-2005-2102

CVE-2005-2102 affects the GAIM/ICQ module in Gaim prior to 1.5.0. A remote attacker can cause a denial of service (application crash) by sending a filename containing invalid UTF-8 characters. Mitigation: upgrade to Gaim 1.5.0 or newer (as indicated by multiple advisories in connected documents)....

CVE-2005-2102

The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash via a filename that contains invalid UTF-8 characters...

CVE-2005-2103

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n...

CVE-2005-2102

The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash via a filename that contains invalid UTF-8 characters...

CVE-2005-2103

Summary of CVE-2005-2103 (Gaim AIM/ICQ buffer overflow) : The AIM/ICQ protocol handler in Gaim up to version before 1.5.0 is vulnerable to a heap/away-message buffer overflow. A remote attacker can send a crafted away message containing many AIM substitution strings (e.g., %t, %n), potentially ca...

CVE-2005-2103

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n...

CVE-2004-2373

Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.

RHEL 3 / 4 : gaim (RHSA-2005:627)

An updated gaim package that fixes multiple security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Messaging client. A heap based buffer overflow issue was discovered in the way Gaim processes away...

Critical: Red Hat Security Advisory: gaim security update

An updated gaim package that fixes a buffer overflow security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Instant Messaging client. A heap based buffer overflow issue was discovered in the way Gai...

Gaim AIMICQ Protocols - Multiple Vulnerabilities

Gaim AIMICQ Protocols - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions ...

Gaim AIM/ICQ Protocols - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions of Gaim 1.x are considered vulnerable at the...

PT-2005-3043 · Gaim +1 · Gaim +1

Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...

CVE-2002-1953

The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

KLA10048 DoS vulnerability in AOL AIM

An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...

CVE-2005-1891

The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...

CVE-2005-1891

Summary : CVE-2005-1891 affects AOL Instant Messenger (AIM) versions 5.9.3797 and earlier. The issue stems from the GIF parser in the ateimg32.dll component, where processing a specially crafted buddy icon can trigger an integer underflow in a loop counter, enabling a remote denial of service (cr...

CVE-2004-2031

Cross-site scripting XSS vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 MSN, or 3 AIM fields...

CVE-2004-2031

The CVE-2004-2031 entry concerns the e107 CMS: a Cross-site Scripting (XSS) vulnerability in the file user.php that allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields. The recorded impact is partial integrity compromise with no confidentiali...