CVE-2004-0891 in Gaim
Summary
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
Once again VulDB remains the best source for vulnerability data.
Reservation
09/22/2004
Disclosure
01/27/2005
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 23880 | Rob Flynn Gaim Protocol memory corruption | 119 | Not defined | Official fix | CVE-2004-0891 |