497 matches found
FreeBSD : gaim -- MSN denial-of-service vulnerabilities (f2d6a5e1-26b9-11d9-9289-000c41e2cdad)
The Gaim team discovered denial-of-service vulnerabilities in the MSN protocol handler : After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of...
FreeBSD : gaim -- remote crash on some protocols (889061af-c427-11d9-ac59-02061b08fc24)
The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to crash : It is possible for a remote user to overflow a static buffer by sending an IM containing a very large URL greater than 8192 bytes to the Gaim user. This is not possible on all...
Slackware 10.0 / 10.1 / 9.1 / current : Mozilla/Firefox/Thunderbird (SSA:2005-085-01)
New Mozilla packages are available for Slackware 9.1, 10.0, 10.1, and -current to fix various security issues and bugs. See the Mozilla site for a complete list of the issues patched: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlMo zilla Also updated are Firefox and...
FreeBSD : gaim (1980)
The following package needs to be updated: gaim %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScript...
Slackware 10.0 / 9.1 / current : gaim (SSA:2004-239-01)
New gaim packages are available for Slackware 9.1, 10.0 and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware...
FreeBSD : gaim -- Content-Length header denial-of-service vulnerability (ad61657d-26b9-11d9-9289-000c41e2cdad)
Sean infamous42md reports : When a remote server provides a large 'content-length' header value, Gaim will attempt to allocate a buffer to store the content, however this allocation attempt will cause Gaim to crash if the length exceeds the amount of possible memory. This happens when reading...
Slackware 10.0 / 9.1 / current : gaim updated again (SSA:2004-240-01)
A couple of bugs were found in the gaim 0.82 release, and gaim-0.82.1 was released to fix them. In addition, gaim-encryption-2.29 did not work with gaim-0.82 due to changes in the header files, so the gaim-encryption plugin has also been updated to gaim-encryption-2.30. %NASLMINLEVEL 70300 C...
FreeBSD : gaim -- Yahoo! remote crash vulnerability (2701611f-df5c-11d9-b875-0001020eed82)
Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
Slackware 10.0 / 9.0 / 9.1 / current : gaim (SSA:2004-296-01)
New gaim packages are available for Slackware 9.0, 9.1, 10.0 and -current to fix a buffer overflow in the MSN protocol. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
FreeBSD : gaim -- remote DoS on receiving malformed HTML (142353df-b5cc-11d9-a788-0001020eed82)
The GAIM team reports : Receiving malformed HTML can result in an invalid memory access causing Gaim to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
FreeBSD : gaim -- multiple buffer overflows (4260eacb-26b8-11d9-9289-000c41e2cdad)
Sean infamous42md reports several situations in gaim that may result in exploitable buffer overflows : - Rich Text Format RTF messages in Novell GroupWise protocol - Unsafe use of gethostbyname in zephyr protocol - URLs which are over 2048 bytes long once decoded %NASLMINLEVEL 70300 C Tenable...
Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-133-01)
New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
EUVD-2005-2226
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...
CVE-2005-2225
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...
CVE-2005-2225
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...
PT-2005-3154 · Gaim +1 · Gaim +1
Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger affected versions not specified Gaim affected versions not specified Description: The issue allows remote attackers to cause a denial of service by sending a plaintext message containing the ".pif" string. This string ...
Debian DSA-734-1 : gaim - denial of service
Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1269 A malformed Yahoo filename can result in a crash of the application. - CAN-2005-1934 A...
[SECURITY] [DSA 734-1] New gaim packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 734-1] New gaim packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...
