Login Request a demo
Unscored severity · published Mar 3, 2004
CVE-2004-0007
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to…
–
CVSS
7.2%
EPSS
No
On KEV
Description
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Gaim · Rob Flynn
through 0.74 · source: NVD
UL
Ultramagnetic · Ultramagnetic
through 0.81 · source: NVD
Affected product
GA
Gaim
Rob Flynn
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0007
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0007
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813
marc.info
http://marc.info/?l=bugtraq&m=107513690306318&w=2
marc.info
http://marc.info/?l=bugtraq&m=107522432613022&w=2
Patch
http://security.e-matters.de/advisories/012004.html
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200401-04.xml
More from Gaim
–
CVE-2005-2102
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters
–
CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus…
–
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name
–
CVE-2005-1934
Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an…
–
CVE-2005-1261
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL