USN-125-1: Gaim vulnerabilities

Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...

Gaim: Denial of Service and buffer overflow vulnerabilties

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, with a very...

GLSA-200505-09 : Gaim: Denial of Service and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-09 Gaim: Denial of Service and buffer overflow vulnerabilities Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, wit...

gaim security update

CentOS Errata and Security Advisory CESA-2005:432-01 An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol...

gaim security update

CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...

Critical: Red Hat Security Advisory: gaim security update

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

CVE-2005-1262

CVE-2005-1262 affects Gaim 1.2.1 and earlier. The issue allows remote attackers to cause a denial of service (application crash) by sending a malformed MSN message. Connected sources corroborate a separate but related buffer/URL handling flaw (CVE-2005-1261) and indicate updated packages to fix b...

CVE-2005-1262

Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...

CVE-2005-1262

Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...

CVE-2005-1261

Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...

CVE-2005-1262

Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...

CVE-2005-1261

Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...

CVE-2005-1261

Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...

CVE-2005-1261

CVE-2005-1261 is a stack-based buffer overflow in Gaim's URL parsing that affects versions before 1.3.0. A remote attacker could trigger arbitrary code execution by sending an IM containing a very large URL. Public disclosures and advisories (SUSE, OpenVAS/Gentoo, Mandrake/CentOS/Ubuntu/Nessus co...

Gaim < 1.3.0 Multiple Vulnerabilities

Binary data 2894.prm...

CVE-2005-1262: Undefined Security Weakness

Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...

CVE-2005-1261: Undefined Security Weakness

Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...

RHEL 3 / 4 : gaim (RHSA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

RHEL 2.1 : gaim (RHSA-2005:432)

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

gaim -- MSN remote DoS vulnerability

The GAIM team reports: Potential remote denial of service bug resulting from not checking a pointer for non-NULL before passing it to strncmp, which results in a crash. This can be triggered by a remote client sending an SLP message with an empty body...