CVE-2005-0967

Gaim 1.2.0 allows remote attackers to cause a denial of service application crash via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read...

Gaim: Denial of Service issues

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Multiple vulnerabilities have been addressed in the latest release of Gaim: A buffer overread in the gaimmarkupstriphtml function, which is used when logging conversatio...

CVE-2005-0967: Undefined Security Weakness

Gaim 1.2.0 allows remote attackers to cause a denial of service application crash via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read...

Gaim < 1.2.1 Multiple Vulnerabilities

Binary data 2793.prm...

USN-106-1: Gaim vulnerabilities

Jean-Yves Lefort discovered a buffer overflow in the gaimmarkupstriphtml function. This caused Gaim to crash when receiving certain malformed HTML messages. CAN-2005-0965 Jean-Yves Lefort also noticed that many functions that handle IRC commands do not escape received HTML metacharacters; this...

CVE-2005-0965

The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read...

CVE-2005-0966

The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via ircmsginvite, or 3 malicious IR...

CVE-2005-0965

CVE-2005-0965 affects the Gaim client. The description states a buffer/out-of-bounds read caused by the gaim_markup_strip_html function when processing malformed HTML, allowing remote attackers to trigger a denial of service (application crash) in Gaim 1.2.0 and possibly earlier versions. Public ...

CVE-2005-0966

CVE-2005-0966 concerns the IRC protocol handling in Gaim (GAIM) 1.2.0 and possibly earlier. The vulnerability stems from how IRC messages are processed by the IRC protocol plugin, allowing remote attackers to inject arbitrary markup into the Gaim UI via functions such as irc_msg_kick, irc_msg_mod...

gaim -- jabber remote crash

The GAIM team reports: A remote jabber user can cause Gaim to crash by sending a specific file transfer request...

CVE-2005-0965: Undefined Security Weakness

The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read...

CVE-2005-0966: Undefined Security Weakness

The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via ircmsginvite, or 3 malicious IR...

multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

Multiple gaim instant messanger DoS vulnerabilities

Multiple bugs in different messages formats and protocols...

gaim -- remote DoS on receiving certain messages over IRC

The GAIM team reports: The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via...

gaim -- remote DoS on receiving malformed HTML

The GAIM team reports: The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read...

Mozilla/Firefox/Thunderbird

New Mozilla packages are available for Slackware 9.1, 10.0, 10.1, and -current to fix various security issues and bugs. See the Mozilla site for a complete list of the issues patched: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlMozilla Also updated are Firefox and Thunderbi...

CVE-2005-0472

Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...

CVE-2005-0473

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

CVE-2005-0473

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...