GA
Product
Gaim
26
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Gaim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-2102 | – | Aug 16 | The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters Affected: 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.1.0; +7 more |
| CVE-2005-2370 | – | Jul 26 | Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus… Affected: through 1.4.0 |
| CVE-2005-1269 | – | Jun 16 | Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +34 more |
| CVE-2005-1934 | – | May 19 | Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an… Affected: through 1.3.0 |
| CVE-2005-1261 | – | May 11 | Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +34 more |
| CVE-2005-1262 | – | May 11 | Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +34 more |
| CVE-2005-0573 | – | May 2 | Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis)… Affected: 1.1.3 |
| CVE-2005-0967 | – | May 2 | Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read Affected: 1.2.0 |
| CVE-2005-0966 | – | May 2 | The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part,… Affected: 1.2.0 |
| CVE-2005-0965 | – | May 2 | The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that… Affected: 1.2.0 |
| CVE-2005-0208 | – | May 2 | The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access,"… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3 |
| CVE-2005-0472 | – | Mar 14 | Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ Affected: 1.0; 1.0.1; 1.1.1; 1.1.2 |
| CVE-2005-0473 | – | Mar 14 | The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access,"… Affected: 1.0; 1.0.1; 1.1.1; 1.1.2 |
| CVE-2004-0891 | – | Jan 27 | Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via… Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +28 more |
| CVE-2004-2589 | – | Dec 31 | Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to… Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +30 more |
| CVE-2004-0754 | – | Oct 20 | Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +23 more |
| CVE-2004-0785 | – | Oct 20 | Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2)… Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +23 more |
| CVE-2004-0784 | – | Oct 20 | The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged… Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +23 more |
| CVE-2004-0500 | – | Sep 28 | Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary… Affected: 0.10; 0.10.3; 0.50; 0.51; 0.52; 0.53; +23 more |
| CVE-2004-0006 | – | Mar 3 | Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1)… Affected: through 0.75 |
| CVE-2004-0008 | – | Mar 3 | Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM… Affected: through 0.74 |
| CVE-2004-0007 | – | Mar 3 | Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to… Affected: through 0.74 |
| CVE-2002-0384 | – | Oct 4 | Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code Affected: 0.51; 0.52; 0.53; 0.54; 0.55; 0.56; +1 more |
| CVE-2002-0989 | – | Sep 24 | The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link Affected: 0.51; 0.52; 0.53; 0.54; 0.55; 0.56; +3 more |
| CVE-2002-0377 | – | May 29 | Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users… Affected: 0.57 |
| CVE-2000-1172 | – | Jan 9 | Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML… Affected: 0.10; 0.10.3 |
Showing 26