CVEvulnerability

CVE-2004-2589

5.0 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.

Affected configurations

• rob flynn gaim 0.10 • rob flynn gaim 0.10.3 • rob flynn gaim 0.50 • rob flynn gaim 0.51 • rob flynn gaim 0.52 • rob flynn gaim 0.53 • rob flynn gaim 0.54 • rob flynn gaim 0.55 • rob flynn gaim 0.56 • rob flynn gaim 0.57 • rob flynn gaim 0.58 • rob flynn gaim 0.59 • rob flynn gaim 0.59.1 • rob flynn gaim 0.60 • rob flynn gaim 0.61 • rob flynn gaim 0.62 • rob flynn gaim 0.63 • rob flynn gaim 0.64 • rob flynn gaim 0.65 • rob flynn gaim 0.66 • rob flynn gaim 0.67 • rob flynn gaim 0.68 • rob flynn gaim 0.69 • rob flynn gaim 0.70 • rob flynn gaim 0.71 • rob flynn gaim 0.72 • rob flynn gaim 0.73 • rob flynn gaim 0.74 • rob flynn gaim 0.75 • rob flynn gaim 0.76 • rob flynn gaim 0.77 • rob flynn gaim 0.78 • rob flynn gaim 0.79 • rob flynn gaim 0.80 • rob flynn gaim 0.81 • rob flynn gaim 0.82

Related

Referenced by CWE · observed example (1)

  • CWE-789 Memory Allocation with Excessive Size Value weakness

References