Login Request a demo
Unscored severity · published Oct 20, 2004
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Gaim · Rob Flynn
0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +23 more · source: NVD
Affected product
GA
Gaim
Rob Flynn
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0784
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0784
Patch
http://gaim.sourceforge.net/security/?id=1
Patch
http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
Patch
http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2004-400.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
More from Gaim
–
CVE-2005-2102
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters
–
CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus…
–
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name
–
CVE-2005-1934
Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an…
–
CVE-2005-1261
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL