Fedora Core 4 : gaim-1.3.1-0.fc4 (2005-411)

More bug and denial of service fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

RHEL 3 / 4 : gaim (RHSA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

Fedora Core 3 : gaim-1.3.1-0.fc3 (2005-410)

More bug and denial of service fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

gaim security update

CentOS Errata and Security Advisory CESA-2005:518 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074034.html https://lists.centos.org/pipermail/centos-announce/2005-June/074035.html...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...

USN-140-1: Gaim vulnerability

A remote Denial of Service vulnerability was discovered in Gaim. A remote attacker could crash the Gaim client of an MSN user by sending a specially crafted MSN package which states an invalid body length in the header...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

CVE-2005-1269 affects Gaim prior to 1.3.1. A remote attacker can cause an application crash by sending a Yahoo! message with a non-ASCII filename, resulting in a denial of service. The issue is confirmed in multiple advisories referencing Gaim in affected packages; remediation is to upgrade to ve...

gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some minor security issues. Sites that use GAIM should upgrade to the new version. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/gaim-1.3.1-i486-1.tgz: Upgraded to gaim-1.3.1 and...

GLSA-200506-11 : Gaim: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...

Gaim: Denial of Service vulnerabilities

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de...

USN-139-1: Gaim vulnerability

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented "a", a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member...

Gaim < 1.3.1 Multiple Vulnerabilities

Binary data 3012.prm...

gaim -- MSN Remote DoS vulnerability

The GAIM team reports: Remote attackers can cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...

gaim -- Yahoo! remote crash vulnerability

Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol...

CVE-2005-1934

Gaim before 1.3.1 allows remote attackers to cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...

CVE-2005-1934

GAIM (the multi-protocol instant messaging client) is affected. CVE-2005-1934 arises from processing a malformed MSN message that triggers an overly large memory allocation, likely due to an integer signedness error, causing the application to crash (denial of service). Multiple connected advisor...

CVE-2005-1934

Gaim before 1.3.1 allows remote attackers to cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...