FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

gaim -- buffer overflow in MSN protocol support

Affected packages
0.79 <= gaim <= 1.0.1
0.79 <= ja-gaim <= 1.0.1
0.79 <= ru-gaim <= 1.0.1
20030000 < gaim

Details

VuXML ID 1e6c4008-245f-11d9-b584-0050fc56d258
Discovery 2004-10-19
Entry 2004-10-25

Due to a buffer overflow in the MSN protocol support for gaim 0.79 to 1.0.1, it is possible for remote clients to do a denial-of-service attack on the application. This is caused by an unbounded copy operation, which writes to the wrong buffer.

References

CVE Name CVE-2004-0891
URL http://gaim.sourceforge.net/security/?id=9