Critical: Red Hat Security Advisory: gaim security update

An updated gaim package that fixes a buffer overflow security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Instant Messaging client. A heap based buffer overflow issue was discovered in the way Gai...

Gaim < 1.3.2 Multiple Vulnerabilities

Binary data 3160.prm...

Gaim AIMICQ Protocols - Multiple Vulnerabilities

Gaim AIMICQ Protocols - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions ...

[SA16379] Gaim Away Message Buffer Overflow and Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Gaim instant messenger buffer overflow

Buffer overflow on away message displaying...

Gaim AIM/ICQ Protocols - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions of Gaim 1.x are considered vulnerable at the...

PT-2005-3043 · Gaim +1 · Gaim +1

Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...

gaim -- AIM/ICQ non-UTF-8 filename crash

The GAIM team reports: A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK+...

gaim -- AIM/ICQ away message buffer overflow

The GAIM team reports: A remote AIM or ICQ user can cause a buffer overflow in Gaim by setting an away message containing many AIM substitution strings such as %t or %n...

Debian DSA-769-1 : gaim - memory alignment bug

Szymon Zygmunt and Michal Bartoszkiewicz discovered a memory alignment error in libgadu from ekg, console Gadu Gadu client, an instant messaging program which is included in gaim, a multi-protocol instant messaging client, as well. This can not be exploited on the x86 architecture but on others,...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

DSA-769-1 gaim - memory alignment bug

Bulletin has no description...

CVE-2005-2370: Undefined Security Weakness

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...

security flaw

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...

Slackware 10.0 / 9.0 / 9.1 / current : gaim (SSA:2004-296-01)

New gaim packages are available for Slackware 9.0, 9.1, 10.0 and -current to fix a buffer overflow in the MSN protocol. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

FreeBSD : gaim -- MSN denial-of-service vulnerabilities (f2d6a5e1-26b9-11d9-9289-000c41e2cdad)

The Gaim team discovered denial-of-service vulnerabilities in the MSN protocol handler : After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of...

FreeBSD : gaim -- malicious smiley themes (635bf5f4-26b7-11d9-9289-000c41e2cdad)

The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source : To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell comman...

Slackware 9.0 / 9.1 / current : GAIM security update (SSA:2004-026-01)

GAIM is a GTK2-based Instant Messaging IM client. New GAIM packages are available for Slackware 9.0, 9.1, and -current. 12 vulnerabilities were found in the instant messenger GAIM that allow remote compromise. All sites using GAIM should upgrade to these new packages. These are based on GAIM 0.75...

FreeBSD : gaim -- remote DoS on receiving malformed HTML (142353df-b5cc-11d9-a788-0001020eed82)

The GAIM team reports : Receiving malformed HTML can result in an invalid memory access causing Gaim to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...