CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

CVE-2005-1269 affects Gaim prior to 1.3.1. A remote attacker can cause an application crash by sending a Yahoo! message with a non-ASCII filename, resulting in a denial of service. The issue is confirmed in multiple advisories referencing Gaim in affected packages; remediation is to upgrade to ve...

gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some minor security issues. Sites that use GAIM should upgrade to the new version. Here are the details from the Slackware 10.1 ChangeLog: patches/packages/gaim-1.3.1-i486-1.tgz: Upgraded to gaim-1.3.1 and...

GLSA-200506-11 : Gaim: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...

Gaim: Denial of Service vulnerabilities

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de...

USN-139-1: Gaim vulnerability

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented "a", a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member...

gaim -- Yahoo! remote crash vulnerability

Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol...

CVE-2002-1665

CVE-2002-1665 describes a buffer overflow in Yahoo! Messenger prior to February 2002, exploitable via a long set_buddygrp field that could cause a crash and potentially allow arbitrary code execution. The affected component is Yahoo! Messenger, with the root cause being an overflow in handling th...

CVE-2002-1664

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information...

CVE-2002-1665

Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long setbuddygrp field...

CVE-2002-1664

Yahoo! Messenger vulnerability CVE-2002-1664: Before February 2002, remote attackers could add arbitrary users to another user’s buddy list, potentially exposing sensitive information. The NVD/CVE entries describe this as a buddy-list manipulation issue with partial confidentiality risk; no expli...

CVE-2005-1671

The CVE-2005-1671 issue affects Yahoo! Messenger 5.x through 6.0, where the Logfile feature can be activated via a YMSGR: URL. This causes output to be written to a single ypager.log file across multiple users, and there is no proper warning to subsequent users that the feature is enabled, enabli...

CVE-2005-1671

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive...

CVE-2005-1671

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive...

CVE-2005-1618

The CVE-2005-1618 entry describes a DoS in Yahoo! Messenger (YMSGR URL handler) for versions 5.x–6.0. A room login/join packet containing a colon and ampersand can cause Messenger to send a corrupted packet to the server, triggering a disconnect. Concrete impact is denial of service; exploitation...

CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service

source: https://www.securityfocus.com/bid/13626/info Yahoo! Messenger is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote user can cause Yahoo! Messenger to disconnect through malicious emails or web pages. This issue is reported ...