498 matches found
CVE-2002-0384
Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code...
CVE-2002-0384
CVE-2002-0384 stems from a buffer overflow in the Jabber plug-in of the Gaim client, affecting versions prior to 0.58. The issue enables remote code execution by an attacker via the Jabber plug-in. Public advisories (e.g., RHSA-2002:122) advise updating to 0.59 (or later), which is no longer vuln...
GLSA-200401-04 : GAIM 0.75 Remote overflows
The remote host is affected by the vulnerability described in GLSA-200401-04 GAIM 0.75 Remote overflows Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team released a rushed release solving this issue, however, at the same time a code audit revealed...
GLSA-200408-12 : Gaim: MSN protocol parsing function buffer overflow
The remote host is affected by the vulnerability described in GLSA-200408-12 Gaim: MSN protocol parsing function buffer overflow Sebastian Krahmer of the SuSE Security Team has discovered a remotely exploitable buffer overflow vulnerability in the code handling MSN protocol parsing. Impact : By...
GLSA-200408-27 : Gaim: New vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200408-27 Gaim: New vulnerabilities Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname. Receiving long URLs. Handli...
[slackware-security] gaim updated again
A couple of bugs were found in the gaim 0.82 release, and gaim-0.82.1 was released to fix them. In addition, gaim-encryption-2.29 did not work with gaim-0.82 due to changes in the header files, so the gaim-encryption plugin has also been updated to gaim-encryption-2.30. Here are the details from...
[slackware-security] gaim
New gaim packages are available for Slackware 9.1, 10.0 and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. Here are the details from the Slackware 10.0 ChangeLog: Thu Aug 26 17:14:09 PDT 2004 patches/packages/gaim-0.82-i486-1.tgz: Upgraded to...
Gaim: New vulnerabilities
Background Gaim is a multi-protocol instant messaging client for Linux which supports many instant messaging protocols. Description Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname...
Gaim < 0.59.1 Remote Command Execution
Binary data 2162.prm...
Gaim < 0.82 MSN Protocol Buffer Overflow
Binary data 2160.prm...
Fedora Core 2 : gaim-0.82-0.FC2 (2004-279)
0.82 update contains many bug and security improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
gaim -- heap overflow exploitable by malicious GroupWise server
Sean infamous42md reports that a malicious GroupWise messaging server may be able to exploit a heap buffer overflow in gaim, leading to arbitrary code execution...
Fedora Core 1 : gaim-0.82-0.FC1 (2004-278)
0.82 update contains many bug and security improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Gaim < 0.59 Web Mail Account Information Disclosure
Binary data 2163.prm...
gaim -- Content-Length header denial-of-service vulnerability
Sean infamous42md reports: When a remote server provides a large "content-length" header value, Gaim will attempt to allocate a buffer to store the content, however this allocation attempt will cause Gaim to crash if the length exceeds the amount of possible memory. This happens when reading...
Gaim / Ultramagnetic Multiple Security Vulnerabilities
Binary data 2161.prm...
Mandrake Linux Security Advisory : gaim (MDKSA-2004:081)
Sebastian Krahmer discovered two remotely exploitable buffer overflow vulnerabilities in the gaim instant messenger. The updated packages are patched to correct the problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
gaim -- malicious smiley themes
The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source: To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell command...
