CVEvulnerability
CVE-2004-0007
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected configurations
• rob flynn gaim (<= 0.74)
• ultramagnetic ultramagnetic (<= 0.81)
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=107513690306318&w=2 marc.info
- http://marc.info/?l=bugtraq&m=107522432613022&w=2 marc.info
- http://security.e-matters.de/advisories/012004.html Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200401-04.xml security.gentoo.org
- http://ultramagnetic.sourceforge.net/advisories/001.html Patch, Vendor Advisory
- http://www.debian.org/security/2004/dsa-434 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/197142 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 www.mandriva.com
- http://www.osvdb.org/3733 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2004-032.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-033.html Patch, Vendor Advisory
- http://www.securityfocus.com/advisories/6281 www.securityfocus.com
- http://www.securityfocus.com/bid/9489 www.securityfocus.com
- http://www.securitytracker.com/id?1008850 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 www.slackware.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14946 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906 oval.cisecurity.org
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=107513690306318&w=2 marc.info
- http://marc.info/?l=bugtraq&m=107522432613022&w=2 marc.info
- http://security.e-matters.de/advisories/012004.html Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200401-04.xml security.gentoo.org
- http://ultramagnetic.sourceforge.net/advisories/001.html Patch, Vendor Advisory
- http://www.debian.org/security/2004/dsa-434 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/197142 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 www.mandriva.com
- http://www.osvdb.org/3733 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2004-032.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-033.html Patch, Vendor Advisory
- http://www.securityfocus.com/advisories/6281 www.securityfocus.com
- http://www.securityfocus.com/bid/9489 www.securityfocus.com
- http://www.securitytracker.com/id?1008850 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 www.slackware.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14946 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906 oval.cisecurity.org