CVE

Id
9212  
CVE No.
CVE-2004-0784  
Status
Candidate  
Description
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.  
Phase
Assigned (20040817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60442 9212 CVE-2004-0784 CONFIRM:http://gaim.sourceforge.net/security/?id=1  View
60443 9212 CVE-2004-0784 FEDORA:FEDORA-2004-278  View
60444 9212 CVE-2004-0784 URL:http://www.fedoranews.org/updates/FEDORA-2004-278.shtml  View
60445 9212 CVE-2004-0784 FEDORA:FEDORA-2004-279  View
60446 9212 CVE-2004-0784 URL:http://www.fedoranews.org/updates/FEDORA-2004-279.shtml  View
60447 9212 CVE-2004-0784 GENTOO:GLSA-200408-27  View
60448 9212 CVE-2004-0784 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml  View
60449 9212 CVE-2004-0784 REDHAT:RHSA-2004:400  View
60450 9212 CVE-2004-0784 URL:http://www.redhat.com/support/errata/RHSA-2004-400.html  View
60451 9212 CVE-2004-0784 OVAL:oval:org.mitre.oval:def:10008  View
60452 9212 CVE-2004-0784 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10008  View
60453 9212 CVE-2004-0784 XF:gaim-smiley-command-execution(17144)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63002 JVNDB-2004-000344 Gaim の過大な URL を含むメッセージによるバッファオーバーフローの脆弱性 ------------ CVE-2004-0785 9212 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000344.html  View