CVEvulnerability

CVE-2004-0500

7.5 HIGH Published 2004-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.

Affected configurations

• rob flynn gaim 0.10 • rob flynn gaim 0.10.3 • rob flynn gaim 0.50 • rob flynn gaim 0.51 • rob flynn gaim 0.52 • rob flynn gaim 0.53 • rob flynn gaim 0.54 • rob flynn gaim 0.55 • rob flynn gaim 0.56 • rob flynn gaim 0.57 • rob flynn gaim 0.58 • rob flynn gaim 0.59 • rob flynn gaim 0.59.1 • rob flynn gaim 0.60 • rob flynn gaim 0.61 • rob flynn gaim 0.62 • rob flynn gaim 0.63 • rob flynn gaim 0.64 • rob flynn gaim 0.65 • rob flynn gaim 0.66 • rob flynn gaim 0.67 • rob flynn gaim 0.68 • rob flynn gaim 0.69 • rob flynn gaim 0.70 • rob flynn gaim 0.71 • rob flynn gaim 0.72 • rob flynn gaim 0.73 • rob flynn gaim 0.74 • rob flynn gaim 0.75 • gentoo linux 1.4 • mandrakesoft mandrake linux 9.2 • mandrakesoft mandrake linux 10.0

References