critical9.8Public exploit code
CVE-2005-2103
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gaim AIM/ICQ Protocols - Multiple Vulnerabilities2005-08-10 · dos · windows · Verified
Impact
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gaim Project | Gaim | before 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://gaim.sourceforge.net/security/?id=22
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-589.html
- http://www.redhat.com/support/errata/RHSA-2005-627.html
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- http://www.securityfocus.com/bid/14531
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477
- https://usn.ubuntu.com/168-1/
- http://gaim.sourceforge.net/security/?id=22
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-589.html
- http://www.redhat.com/support/errata/RHSA-2005-627.html
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- http://www.securityfocus.com/bid/14531
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477
- https://usn.ubuntu.com/168-1/