Unscored severity · published Jan 27, 2005
CVE-2004-0891
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Gaim · Rob Flynn
0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +28 more · source: NVD
LI
Linux · Gentoo
1.4 · source: NVD
SL
Slackware Linux · Slackware
9.0; 9.1; 10.0; current · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0891
Vendor Advisory
http://gaim.sourceforge.net/security/?id=9
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-604.html
bugzilla.fedora.us
https://bugzilla.fedora.us/show_bug.cgi?id=2188
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17786
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17787
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync