497 matches found
CVE-2005-1934
Gaim before 1.3.1 allows remote attackers to cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...
Fedora Core 2 : gaim-1.2.1-1.fc2 (2005-298)
http://gaim.sourceforge.net/security/ http://gaim.sourceforge.net/ChangeLog gaim-1.2.1 resolves CVE-2005-0965 and CVE-2005-0966 as well as some crashes in the jabber and yahoo protocols. Read upstream's pages above for more details. Note that Tenable Network Security has extracted the preceding...
Fedora Core 3 : gaim-1.3.0-1.fc3 (2005-369)
Many bug fixes and two important security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Gaim 1.2.1 - URL Handling Remote Stack Overflow
// Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a conversation, and, if you're using a protocol that allows...
Gaim <= 1.2.1 URL Handling Remote Stack Overflow Exploit
Exploit for linux platform in category dos / poc ======================================================== Gaim // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:086)
More vulnerabilities have been found in the gaim instant messaging client. A stack-based buffer overflow bug was found in how gaim processes a message containing a URL; a remote attacker could send a carefully crafted message to cause the execution of arbitrary code on the user's machine...
Gaim 1.2.1 - URL Handling Remote Stack Overflow
Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...
Gaim <= 1.2.1 URL Handling Remote Stack Overflow Exploit
No description provided by source. // Written by Ron [email protected] // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in...
gaim intant messenger buffer overflow
Buffer oveflow during e-mail address displaying...
[Full-disclosure] Gaim 1.2.1 -- PoC Stack Overflow
Product: Gaim Version: 1.2.1 Remote: Yes Effect: DoS, potential arbitrary code execution Date: May 13, 2005 I was looking at the stack overflow reported in Gaim 1.2.1. It's actually pretty trivial to find. The line that contains it looks like this: strcpyurlbuf, gurlbuf-str; urlbuf is a 8192-byte...
gaim
New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/gaim-1.3.0-i486-1.tgz: Upgraded to gaim-1.3.0. This fixe...
USN-125-1: Gaim vulnerabilities
Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...
Gaim: Denial of Service and buffer overflow vulnerabilties
Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, with a very...
GLSA-200505-09 : Gaim: Denial of Service and buffer overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200505-09 Gaim: Denial of Service and buffer overflow vulnerabilities Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, wit...
gaim security update
CentOS Errata and Security Advisory CESA-2005:432-01 An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol...
gaim security update
CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...
Critical: Red Hat Security Advisory: gaim security update
An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...
CVE-2005-1262
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed MSN message...
CVE-2005-1262
CVE-2005-1262 affects Gaim 1.2.1 and earlier. The issue allows remote attackers to cause a denial of service (application crash) by sending a malformed MSN message. Connected sources corroborate a separate but related buffer/URL handling flaw (CVE-2005-1261) and indicate updated packages to fix b...