CVE

Id
8433  
CVE No.
CVE-2004-0005  
Status
Candidate  
Description
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte.  
Phase
Modified (20071113)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Cox, Green | NOOP(2) Christey, Wall  
Comments
Christey> CERT-VN:VU#404470 | URL:http://www.kb.cert.org/vuls/id/404470 | CERT-VN:VU#655974 | URL:http://www.kb.cert.org/vuls/id/655974 | CERT-VN:VU#226974 | URL:http://www.kb.cert.org/vuls/id/226974 | CERT-VN:VU#190366 | URL:http://www.kb.cert.org/vuls/id/190366  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
51254 8433 CVE-2004-0005 BUGTRAQ:20040126 Advisory 01/2004: 12 x Gaim remote overflows  View
51255 8433 CVE-2004-0005 URL:http://marc.info/?l=bugtraq&m=107513690306318&w=2  View
51256 8433 CVE-2004-0005 FULLDISC:20040126 Advisory 01/2004: 12 x Gaim remote overflows  View
51257 8433 CVE-2004-0005 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html  View
51258 8433 CVE-2004-0005 MISC:http://security.e-matters.de/advisories/012004.html  View
51259 8433 CVE-2004-0005 CONECTIVA:CLA-2004:813  View
51260 8433 CVE-2004-0005 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813  View
51261 8433 CVE-2004-0005 DEBIAN:DSA-434  View
51262 8433 CVE-2004-0005 URL:http://www.debian.org/security/2004/dsa-434  View
51263 8433 CVE-2004-0005 GENTOO:GLSA-200401-04  View
51264 8433 CVE-2004-0005 URL:https://security.gentoo.org/glsa/200401-04  View
51265 8433 CVE-2004-0005 SLACKWARE:SSA:2004-026  View
51266 8433 CVE-2004-0005 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158  View
51267 8433 CVE-2004-0005 SUSE:SuSE-SA:2004:004  View
51268 8433 CVE-2004-0005 URL:http://www.novell.com/linux/security/advisories/2004_04_gaim.html  View
51269 8433 CVE-2004-0005 CERT-VN:VU#190366  View
51270 8433 CVE-2004-0005 URL:http://www.kb.cert.org/vuls/id/190366  View
51271 8433 CVE-2004-0005 CERT-VN:VU#226974  View
51272 8433 CVE-2004-0005 URL:http://www.kb.cert.org/vuls/id/226974  View
51273 8433 CVE-2004-0005 CERT-VN:VU#404470  View
51274 8433 CVE-2004-0005 URL:http://www.kb.cert.org/vuls/id/404470  View
51275 8433 CVE-2004-0005 CERT-VN:VU#655974  View
51276 8433 CVE-2004-0005 URL:http://www.kb.cert.org/vuls/id/655974  View
51277 8433 CVE-2004-0005 OSVDB:3736  View
51278 8433 CVE-2004-0005 URL:http://www.osvdb.org/3736  View
51279 8433 CVE-2004-0005 SECTRACK:1008850  View
51280 8433 CVE-2004-0005 URL:http://www.securitytracker.com/id?1008850  View
51281 8433 CVE-2004-0005 XF:gaim-mime-decoder-bo(14942)  View
51282 8433 CVE-2004-0005 URL:http://xforce.iss.net/xforce/xfdb/14942  View
51283 8433 CVE-2004-0005 XF:gaim-mime-decoder-oob(14944)  View
51284 8433 CVE-2004-0005 URL:http://xforce.iss.net/xforce/xfdb/14944  View
51285 8433 CVE-2004-0005 XF:gaim-yahoodecode-offbyone-bo(14935)  View
51286 8433 CVE-2004-0005 URL:http://xforce.iss.net/xforce/xfdb/14935  View
51287 8433 CVE-2004-0005 XF:gaim-sscanf-oob(14938)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62681 JVNDB-2004-000022 Gaim および Ultramagnetic における複数のバッファオーバーフローの脆弱性 ------------ CVE-2004-0006 8433 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000022.html  View