529 matches found
Ubuntu 4.10 : gaim vulnerabilities (USN-8-1)
A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message. Note that Tenable Network Security has extracted the preceding...
Ubuntu 4.10 : gaim vulnerabilities (USN-106-1)
Jean-Yves Lefort discovered a buffer overflow in the gaimmarkupstriphtml function. This caused Gaim to crash when receiving certain malformed HTML messages. CAN-2005-0965 Jean-Yves Lefort also noticed that many functions that handle IRC commands do not escape received HTML metacharacters; this...
CVE-2005-4693
Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...
CVE-2005-4693
Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...
CVE-2004-2589
CVE-2004-2589 affects the Gaim client prior to version 0.82. A remote attacker can cause a denial of service (application crash) by sending a long HTTP Content-Length header, leading Gaim to abort while allocating memory. The published data indicate an impact on availability (partial), with netwo...
CVE-2004-2589
Gaim before 0.82 allows remote servers to cause a denial of service application crash via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory...
CVE-2004-2589: Undefined Security Weakness
Gaim before 0.82 allows remote servers to cause a denial of service application crash via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory...
Gaim-Encryption plugin DoS
Attempt to access unallocated memory on keys parsing...
[SA17739] Gaim-Encryption Malformed Encrypted Message Denial of Service
TITLE: Gaim-Encryption Malformed Encrypted Message Denial of Service SECUNIA ADVISORY ID: SA17739 VERIFY ADVISORY: http://secunia.com/advisories/17739/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Gaim-Encryption 2.x http://secunia.com/product/6229/ DESCRIPTION: Joerg Kurlbaum...
Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-242-03)
New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 ...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:139)
"Yet more vulnerabilities have been discovered in the gaim IM client. Invalid characters in a sent file can cause Gaim to crash on some systems CVE-2005-2102 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...
Fedora Core 3 : gaim-1.2.1-1.fc3 (2005-299)
http://gaim.sourceforge.net/security/ http://gaim.sourceforge.net/ChangeLog gaim-1.2.1 resolves CVE-2005-0965 and CVE-2005-0966 as well as some crashes in the jabber and yahoo protocols. Read upstream's pages above for more details. Note that Tenable Network Security has extracted the preceding...
Fedora Core 3 : gaim-1.1.3-1.FC3 (2005-160)
Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC3 - FC3 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...
Fedora Core 2 : gaim-1.1.4-0.FC2 (2005-171)
This update resolves another DoS issue in parsing malformed HTML, and a MSN related crash that folks were hitting often. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora Core 2 : gaim-1.1.3-1.FC2 (2005-159)
Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC2 - FC2 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...
Fedora Core 3 : gaim-1.1.4-0.FC3 (2005-172)
This update resolves another DoS issue in parsing malformed HTML, and a MSN related crash that folks were hitting often. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora Core 4 : gaim-1.5.0-1.fc4 (2005-751)
http://gaim.sourceforge.net/ Please see the Changelog details and security information at the upstream Gaim Project site. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
slackware-current security updates
This advisory summarizes recent security fixes in Slackware -current. Usually security advisories are not issued on problems that exist only within the test version of Slackware slackware-current, but since it's so close to being released as Slackware 10.2, and since there have been several...
gaim
New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. More details about...
