CVE

Id
8928  
CVE No.
CVE-2004-0500  
Status
Candidate  
Description
Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
57154 8928 CVE-2004-0500 FEDORA:FEDORA-2004-278  View
57155 8928 CVE-2004-0500 URL:http://www.fedoranews.org/updates/FEDORA-2004-278.shtml  View
57156 8928 CVE-2004-0500 FEDORA:FEDORA-2004-279  View
57157 8928 CVE-2004-0500 URL:http://www.fedoranews.org/updates/FEDORA-2004-279.shtml  View
57158 8928 CVE-2004-0500 GENTOO:GLSA-200408-12  View
57159 8928 CVE-2004-0500 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-12.xml  View
57160 8928 CVE-2004-0500 GENTOO:GLSA-200408-27  View
57161 8928 CVE-2004-0500 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml  View
57162 8928 CVE-2004-0500 MANDRAKE:MDKSA-2004:081  View
57163 8928 CVE-2004-0500 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:081  View
57164 8928 CVE-2004-0500 REDHAT:RHSA-2004:400  View
57165 8928 CVE-2004-0500 URL:http://www.redhat.com/support/errata/RHSA-2004-400.html  View
57166 8928 CVE-2004-0500 SUSE:SUSE-SA:2004:025  View
57167 8928 CVE-2004-0500 URL:http://www.novell.com/linux/security/advisories/2004_25_gaim.html  View
57168 8928 CVE-2004-0500 CONFIRM:http://gaim.sourceforge.net/security/?id=0  View
57169 8928 CVE-2004-0500 BID:10865  View
57170 8928 CVE-2004-0500 URL:http://www.securityfocus.com/bid/10865  View
57171 8928 CVE-2004-0500 OVAL:oval:org.mitre.oval:def:9429  View
57172 8928 CVE-2004-0500 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9429  View
57173 8928 CVE-2004-0500 XF:gaim-msn-bo(16920)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62843 JVNDB-2004-000185 Microsoft Outlook における画像の自動ダウンロードの設定回避の脆弱性 Microsoft Outlook に実装されている [画像の自動ダウンロードの設定] 機能にはセキュリティ上の不備のため、ブロックの設定を回避して vmlframe を利用した送信者への開封通知を許してしまう脆弱性が存在します。 CVE-2004-0501 8928 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000185.html  View