497 matches found
[SECURITY] [DSA 716-1] New gaim packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 716-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 716-1] New gaim packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 716-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
DSA-716-1 gaim - denial of service
Bulletin has no description...
gaim
New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix several security issues. Sites that use GAIM should upgrade to the new version. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/gaim-1.2.1-i486-1.tgz: Upgraded to gaim-1.2.1. According...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:071)
More vulnerabilities have been discovered in the gaim instant messaging client : A buffer overflow vulnerability was found in the way that gaim escapes HTML, allowing a remote attacker to send a specially crafted message to a gaim client and causing it to crash CVE-2005-0965. A bug was discovered...
gaim security update
CentOS Errata and Security Advisory CESA-2005:365 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-April/073719.html https://lists.centos.org/pipermail/centos-announce/2005-April/073720.html...
RHEL 3 / 4 : gaim (RHSA-2005:365)
An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...
GLSA-200504-05 : Gaim: Denial of Service issues
The remote host is affected by the vulnerability described in GLSA-200504-05 Gaim: Denial of Service issues Multiple vulnerabilities have been addressed in the latest release of Gaim: A buffer overread in the gaimmarkupstriphtml function, which is used when logging conversations CAN-2005-0965...
CVE-2005-0967
Gaim 1.2.0 allows remote attackers to cause a denial of service application crash via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read...
CVE-2005-0967
Gaim 1.2.0 is affected by CVE-2005-0967. The issue occurs when handling a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read and causes the application to crash (denial of service). The vulnerability focuses on Jabber message/file transfer parsing; no exploit d...
Gaim: Denial of Service issues
Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Multiple vulnerabilities have been addressed in the latest release of Gaim: A buffer overread in the gaimmarkupstriphtml function, which is used when logging conversatio...
Gaim < 1.2.1 Multiple Vulnerabilities
Binary data 2793.prm...
USN-106-1: Gaim vulnerabilities
Jean-Yves Lefort discovered a buffer overflow in the gaimmarkupstriphtml function. This caused Gaim to crash when receiving certain malformed HTML messages. CAN-2005-0965 Jean-Yves Lefort also noticed that many functions that handle IRC commands do not escape received HTML metacharacters; this...
CVE-2005-0965
The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read...
CVE-2005-0965
CVE-2005-0965 affects the Gaim client. The description states a buffer/out-of-bounds read caused by the gaim_markup_strip_html function when processing malformed HTML, allowing remote attackers to trigger a denial of service (application crash) in Gaim 1.2.0 and possibly earlier versions. Public ...
CVE-2005-0966
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via ircmsginvite, or 3 malicious IR...
CVE-2005-0966
CVE-2005-0966 concerns the IRC protocol handling in Gaim (GAIM) 1.2.0 and possibly earlier. The vulnerability stems from how IRC messages are processed by the IRC protocol plugin, allowing remote attackers to inject arbitrary markup into the Gaim UI via functions such as irc_msg_kick, irc_msg_mod...
gaim -- jabber remote crash
The GAIM team reports: A remote jabber user can cause Gaim to crash by sending a specific file transfer request...
multiple remote denial of service vulnerabilities in Gaim
I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...