[slackware-security] gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0 and -current to fix a buffer overflow in the MSN protocol. Sites that use GAIM should upgrade to the new version. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

CVE-2004-0891

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer...

CVE-2004-0891

GAIM is affected by CVE-2004-0891: a buffer overflow in the MSN protocol handler (MSNSLP) for gaim versions 0.79 through 1.0.1, caused by an unbounded copy that writes to the wrong buffer during processing of an unexpected MSNSLP sequence. This can cause remote denial of service (crash) and poten...

RHEL 3 : gaim (RHSA-2004:604)

An updated gaim package that fixes security issues, fixes various bugs, and includes various enhancements for Red Hat Enterprise Linux 3 is now available. The gaim application is a multi-protocol instant messaging client. A buffer overflow has been discovered in the MSN protocol handler. When...

Microsoft MSN "Hrtbeat.ocx" ActiveX control contains unspecified vulnerability

Overview A vulnerability exists in the Microsoft MSN "Hrtbeat.ocx" ActiveX control. Description ActiveX is a technology that allows programmers to create reusable software components that can be incorporated into applications to extend their functionality. Microsoft Internet Explorer provides...

gaim -- MSN denial-of-service vulnerabilities

The Gaim team discovered denial-of-service vulnerabilities in the MSN protocol handler: After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of...

gaim -- buffer overflow in MSN protocol support

Due to a buffer overflow in the MSN protocol support for gaim 0.79 to 1.0.1, it is possible for remote clients to do a denial-of-service attack on the application. This is caused by an unbounded copy operation, which writes to the wrong buffer...

MSN Gaming Heartbeat Component Buffer Overflow

John Heasman of NGSSoftware has discovered a high risk vulnerability in the Heartbeat component used on MSN related gaming sites. This vulnerability has now been fixed by Microsoft, and a fix can be downloaded from the Microsoft Security website:...

CVE-2004-0500

Buffer overflow in the MSN protocol plugins 1 object.c and 2 slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call...

CVE-2004-0500

Buffer overflow in the MSN protocol plugins 1 object.c and 2 slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call...

trillian074i.txt

AUTHOR Komrade DATE 08/09/2004 PRODUCT Trillian is a chat client currently supporting IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger. from readme.txt file DETAILS A buffer overflow vulnerability in basic edition version 0.74i latest version occours in the MSN module when receiving a string of...

Trillian 0.74i MSN Module - Remote Buffer Overflow

Trillian 0.74i MSN Module - Remote Buffer Overflow / Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit created by Komrade - unsecure altervista org Written for Windows 2000 / Windows XP. Tested on Windows XP Professional sp0. This exploit spawn a shell on port 5555, you have...

Cerulean Studios Trillian Client 0.74 MSN Module - Remote Buffer Overflow

Cerulean Studios Trillian Client 0.74 MSN Module - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow ...

[Full-Disclosure] Cerulean Studios Trillian 0.74i buffer overflow in MSN module

PRODUCT Trillian is a chat client currently supporting IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger. from readme.txt file DETAILS A buffer overflow vulnerability in basic edition version 0.74i latest version occours in the MSN module when receiving a string of around 4096 bytes ended with a...

Trillian 0.74i Remote Buffer Overflow Exploit (MSN Module Bug)

No description provided by source. / Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit created by Komrade - unsecure altervista org Written for Windows 2000 / Windows XP. Tested on Windows XP Professional sp0. This exploit spawn a shell on port 5555, you have just to execute t...

Trillian MSN Overflow

Trillian is a Peer2Peer client that allows users to chat and share files with other users across the world. A bug has been reported in the MSN portion of Trillian. A remote attacker, exploiting this flaw, would be potentially able to execute code on the client system running Trillian. C Tenable...

Trillian 0.74i Remote Buffer Overflow Exploit (MSN Module Bug)

Exploit for unknown platform in category remote exploits ============================================================== Trillian 0.74i Remote Buffer Overflow Exploit MSN Module Bug ============================================================== / Cerulean Studios Trillian 0.74i Buffer Overflow in...

CVE-2004-0500

Buffer overflow in the MSN protocol plugins 1 object.c and 2 slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call...

CVE-2004-0500

CVE-2004-0500 is a vulnerability in the MSN protocol plugins of Gaim (object.c and slp.c) where a misused strncpy call allows a remote attacker to trigger a buffer overflow. This can lead to a denial of service and may enable remote code execution. The description specifies the affected product a...

CVE-2004-0122

CVE-2004-0122 is described as affecting Microsoft MSN Messenger 6.0 and 6.1, allowing remote attackers to read arbitrary files via improper handling of certain requests. Connected advisories for pidgin/libpurple reference a related directory-traversal issue in the MSN protocol plugin (slp.c) that...