CVE-2004-0891

2005-01-2700:00:00

ubuntu.com

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.088 Low

EPSS

Percentile

94.6%

JSON

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows
remote attackers to cause a denial of service (application crash) and
possibly execute arbitrary code via an “unexpected sequence of MSNSLP
messages” that results in an unbounded copy operation that writes to the
wrong buffer.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN
ubuntu6.10noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN
ubuntu7.04noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN
ubuntu	6.10	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN
ubuntu	7.04	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN