Gaim < 1.1.3 Multiple DoS Vulnerabilities

Binary data 2631.prm...

Gaim vulnerable to malformed SNAC packet infinite processing loop

Overview Gaim contains a flaw in the processing of certain packets that may cause a denial of service. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar protocol, MSN Messenger,...

Gaim vulnerable to HTML processing denial of service

Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...

CVE-2005-0472

Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...

CVE-2005-0473

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

CVE-2005-0472

Gaim (GAIM) before 1.1.3 is CERTified vulnerable to remote DoS via specially malformed SNAC packets from AIM/ICQ. The issue stems from SNAC packet processing that can trigger an infinite loop, causing the client to become unresponsive. Public reports reference CVE-2005-0472 (and related CAN/CVE m...

CVE-2005-0473

CVE-2005-0473 affects the GAIM (Gaim) client prior to version 1.1.3. The issue arises in the HTML parsing code: processing malformed HTML can trigger an invalid memory access, leading to an application crash (DoS). Multiple connected advisories note the same flaw and reference 1.1.3 as the fixed ...

CVE-2005-0473: Undefined Security Weakness

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

CVE-2005-0472: Undefined Security Weakness

Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...

gaim -- AIM/ICQ remote denial of service vulnerability

The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to freeze: Certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim when parsing the SNAC. The remote user would need a custom client, able to generate...

CVE-2004-2589

Gaim before 0.82 allows remote servers to cause a denial of service application crash via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory...

Mandrake Linux Security Advisory : gaim (MDKSA-2004:117)

A vulnerability in the MSN protocol handler in the gaim instant messenger application was discovered. When receiving unexpected sequences of MSNSLP messages, it is possible that an attacker could trigger an internal buffer overflow which could lead to a crash or even code execution as the user...

USN-8-1: gaim vulnerabilities

A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message...

GLSA-200410-23 : Gaim: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200410-23 Gaim: Multiple vulnerabilities A possible buffer overflow exists in the code processing MSN SLP messages CAN-2004-0891. memcpy was used without validating the size of the buffer, and an incorrect buffer was used as...

[slackware-security] gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0 and -current to fix a buffer overflow in the MSN protocol. Sites that use GAIM should upgrade to the new version. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

Mandrake Linux Security Advisory : gaim (MDKSA-2004:110)

More vulnerabilities have been discovered in the gaim instant messenger client. The vulnerabilities pertinent to version 0.75, which is the version shipped with Mandrakelinux 10.0, are: installing smiley themes could allow remote attackers to execute arbitrary commands via shell metacharacters in...

CVE-2004-0891

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer...

CVE-2004-0891

GAIM is affected by CVE-2004-0891: a buffer overflow in the MSN protocol handler (MSNSLP) for gaim versions 0.79 through 1.0.1, caused by an unbounded copy that writes to the wrong buffer during processing of an unexpected MSNSLP sequence. This can cause remote denial of service (crash) and poten...

Gaim < 1.0.2 Multiple Vulnerabilities

Binary data 2366.prm...

CVE-2004-0891: Undefined Security Weakness

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer...