gaim -- AIM/ICQ non-UTF-8 filename crash

The GAIM team reports: A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK+...

gaim -- AIM/ICQ away message buffer overflow

The GAIM team reports: A remote AIM or ICQ user can cause a buffer overflow in Gaim by setting an away message containing many AIM substitution strings such as %t or %n...

PT-2005-3043 · Gaim +1 · Gaim +1

Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...

Debian DSA-769-1 : gaim - memory alignment bug

Szymon Zygmunt and Michal Bartoszkiewicz discovered a memory alignment error in libgadu from ekg, console Gadu Gadu client, an instant messaging program which is included in gaim, a multi-protocol instant messaging client, as well. This can not be exploited on the x86 architecture but on others,...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

DSA-769-1 gaim - memory alignment bug

Bulletin has no description...

security flaw

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...

FreeBSD : gaim -- malicious smiley themes (635bf5f4-26b7-11d9-9289-000c41e2cdad)

The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source : To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell comman...

FreeBSD : gaim -- heap overflow exploitable by malicious GroupWise server (e16293f0-26b7-11d9-9289-000c41e2cdad)

Sean infamous42md reports that a malicious GroupWise messaging server may be able to exploit a heap buffer overflow in gaim, leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : gaim -- remote DoS on receiving certain messages over IRC (ec09baa3-a9f5-11d9-a788-0001020eed82)

The GAIM team reports : The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via...

FreeBSD : gaim -- jabber remote crash (ecf68408-a9f5-11d9-a788-0001020eed82)

The GAIM team reports : A remote jabber user can cause Gaim to crash by sending a specific file transfer request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacque...

Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-162-01)

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some minor security issues. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

FreeBSD : gaim -- MSN Remote DoS vulnerability (b6612eee-df5f-11d9-b875-0001020eed82)

The GAIM team reports : Remote attackers can cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-111-03)

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

FreeBSD : gaim -- AIM/ICQ remote denial of service vulnerability (8b0e94cc-b5cd-11d9-a788-0001020eed82)

The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to freeze : Certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim when parsing the SNAC. The remote user would need a custom client, able to generat...

FreeBSD : gaim -- remote DoS on receiving malformed HTML (3fa2b372-a9f5-11d9-a788-0001020eed82)

The GAIM team reports : The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read. %NASLMINLEVEL 70300 C Tenable Network...

FreeBSD : gaim -- buffer overflow in MSN protocol support (1e6c4008-245f-11d9-b584-0050fc56d258)

Due to a buffer overflow in the MSN protocol support for gaim 0.79 to 1.0.1, it is possible for remote clients to do a denial-of-service attack on the application. This is caused by an unbounded copy operation, which writes to the wrong buffer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Slackware 9.0 / 9.1 / current : GAIM security update (SSA:2004-026-01)

GAIM is a GTK2-based Instant Messaging IM client. New GAIM packages are available for Slackware 9.0, 9.1, and -current. 12 vulnerabilities were found in the instant messenger GAIM that allow remote compromise. All sites using GAIM should upgrade to these new packages. These are based on GAIM 0.75...

FreeBSD : gaim -- MSN remote DoS vulnerability (ad5e70bb-c429-11d9-ac59-02061b08fc24)

The GAIM team reports : Potential remote denial of service bug resulting from not checking a pointer for non-NULL before passing it to strncmp, which results in a crash. This can be triggered by a remote client sending an SLP message with an empty body. %NASLMINLEVEL 70300 C Tenable Network...