CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...

CVE-2004-2589

CVE-2004-2589 affects the Gaim client prior to version 0.82. A remote attacker can cause a denial of service (application crash) by sending a long HTTP Content-Length header, leading Gaim to abort while allocating memory. The published data indicate an impact on availability (partial), with netwo...

CVE-2004-2589

Gaim before 0.82 allows remote servers to cause a denial of service application crash via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory...

Gaim-Encryption plugin DoS

Attempt to access unallocated memory on keys parsing...

[SA17739] Gaim-Encryption Malformed Encrypted Message Denial of Service

TITLE: Gaim-Encryption Malformed Encrypted Message Denial of Service SECUNIA ADVISORY ID: SA17739 VERIFY ADVISORY: http://secunia.com/advisories/17739/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Gaim-Encryption 2.x http://secunia.com/product/6229/ DESCRIPTION: Joerg Kurlbaum...

Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-242-03)

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 ...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:139)

"Yet more vulnerabilities have been discovered in the gaim IM client. Invalid characters in a sent file can cause Gaim to crash on some systems CVE-2005-2102 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

Fedora Core 2 : gaim-1.1.4-0.FC2 (2005-171)

This update resolves another DoS issue in parsing malformed HTML, and a MSN related crash that folks were hitting often. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Core 3 : gaim-1.2.1-1.fc3 (2005-299)

http://gaim.sourceforge.net/security/ http://gaim.sourceforge.net/ChangeLog gaim-1.2.1 resolves CVE-2005-0965 and CVE-2005-0966 as well as some crashes in the jabber and yahoo protocols. Read upstream's pages above for more details. Note that Tenable Network Security has extracted the preceding...

Fedora Core 3 : gaim-1.1.3-1.FC3 (2005-160)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC3 - FC3 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

Fedora Core 4 : gaim-1.5.0-1.fc4 (2005-751)

http://gaim.sourceforge.net/ Please see the Changelog details and security information at the upstream Gaim Project site. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Core 3 : gaim-1.1.4-0.FC3 (2005-172)

This update resolves another DoS issue in parsing malformed HTML, and a MSN related crash that folks were hitting often. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Core 2 : gaim-1.1.3-1.FC2 (2005-159)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC2 - FC2 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

slackware-current security updates

This advisory summarizes recent security fixes in Slackware -current. Usually security advisories are not issued on problems that exist only within the test version of Slackware slackware-current, but since it's so close to being released as Slackware 10.2, and since there have been several...

gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. More details about...

DTSA-5-1 gaim - multiple remote vulnerabilities

Bulletin has no description...

Fedora Core 3 : gaim-1.5.0-1.fc3 (2005-750)

http://gaim.sourceforge.net/ Please see the Changelog details and security information at the upstream Gaim Project site. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

GLSA-200508-06 : Gaim: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200508-06 Gaim: Remote execution of arbitrary code Brandon Perry discovered that Gaim is vulnerable to a heap-based buffer overflow when handling away messages CAN-2005-2103. Furthermore, Daniel Atallah discovered a vulnerability ...

CVE-2005-2103

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n...