CVE

Id
9319  
CVE No.
CVE-2004-0891  
Status
Candidate  
Description
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.  
Phase
Assigned (20040922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61873 9319 CVE-2004-0891 FEDORA:FLSA:2188  View
61874 9319 CVE-2004-0891 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2188  View
61875 9319 CVE-2004-0891 GENTOO:GLSA-200410-23  View
61876 9319 CVE-2004-0891 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml  View
61877 9319 CVE-2004-0891 REDHAT:RHSA-2004:604  View
61878 9319 CVE-2004-0891 URL:http://www.redhat.com/support/errata/RHSA-2004-604.html  View
61879 9319 CVE-2004-0891 UBUNTU:USN-8-1  View
61880 9319 CVE-2004-0891 URL:https://www.ubuntu.com/usn/usn-8-1/  View
61881 9319 CVE-2004-0891 CONFIRM:http://gaim.sourceforge.net/security/?id=9  View
61882 9319 CVE-2004-0891 OVAL:oval:org.mitre.oval:def:11790  View
61883 9319 CVE-2004-0891 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11790  View
61884 9319 CVE-2004-0891 XF:gaim-file-transfer-dos(17790)  View
61885 9319 CVE-2004-0891 URL:http://xforce.iss.net/xforce/xfdb/17790  View
61886 9319 CVE-2004-0891 XF:gaim-msn-slp-bo(17786)  View
61887 9319 CVE-2004-0891 URL:http://xforce.iss.net/xforce/xfdb/17786  View
61888 9319 CVE-2004-0891 XF:gaim-msn-slp-dos(17787)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63133 JVNDB-2004-000475 Microsoft ISA Server の逆引き参照のキャッシュ処理におけるスプーフィングの脆弱性 Microsoft ISA Server には、逆引き参照の結果をキャッシュする方法にセキュリティ上の問題が存在するため、信頼されるサイトに接続する際に詐称された IP アドレスへ接続されてしまう脆弱性が存在します。 CVE-2004-0892 9319 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000475.html  View