874 matches found
CVE-2005-1934
Gaim before 1.3.1 allows remote attackers to cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...
CVE-2005-1934
Gaim before 1.3.1 allows remote attackers to cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:086)
More vulnerabilities have been found in the gaim instant messaging client. A stack-based buffer overflow bug was found in how gaim processes a message containing a URL; a remote attacker could send a carefully crafted message to cause the execution of arbitrary code on the user's machine...
USN-125-1: Gaim vulnerabilities
Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...
Gaim: Denial of Service and buffer overflow vulnerabilties
Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, with a very...
GLSA-200505-09 : Gaim: Denial of Service and buffer overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200505-09 Gaim: Denial of Service and buffer overflow vulnerabilities Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, wit...
gaim security update
CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...
CVE-2005-1262
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...
CVE-2005-1262
CVE-2005-1262 affects Gaim 1.2.1 and earlier. The issue allows remote attackers to cause a denial of service (application crash) by sending a malformed MSN message. Connected sources corroborate a separate but related buffer/URL handling flaw (CVE-2005-1261) and indicate updated packages to fix b...
CVE-2005-1262
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...
CVE-2005-1262
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...
Gaim < 1.3.0 Multiple Vulnerabilities
Binary data 2894.prm...
CVE-2005-1262: Undefined Security Weakness
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...
CVE-2004-2031
Cross-site scripting XSS vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 MSN, or 3 AIM fields...
CVE-2004-2031
The CVE-2004-2031 entry concerns the e107 CMS: a Cross-site Scripting (XSS) vulnerability in the file user.php that allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields. The recorded impact is partial integrity compromise with no confidentiali...
gaim -- MSN remote DoS vulnerability
The GAIM team reports: Potential remote denial of service bug resulting from not checking a pointer for non-NULL before passing it to strncmp, which results in a crash. This can be triggered by a remote client sending an SLP message with an empty body...
CVE-2003-1195: Undefined Security Weakness
SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable...
CVE-2005-0874
Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...
ICUII 7.0 - Local Password Disclosure
/ ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions Procuder: Cybration - www.icuii.com Vulnerable Description: ICUII 7.0 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...