NVD

Id
71208  
Name
CVE-2004-0784  
Description
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-10-20  
Modified Date
2017-07-10  
Seq
2004-0784  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367776 71208 CVE-2004-0784 http://gaim.sourceforge.net/security/?id=1  View
367777 71208 CVE-2004-0784 oval:org.mitre.oval:def:10008  View
367778 71208 CVE-2004-0784 FEDORA-2004-278  View
367779 71208 CVE-2004-0784 FEDORA-2004-279  View
367780 71208 CVE-2004-0784 GLSA-200408-27  View
367781 71208 CVE-2004-0784 RHSA-2004:400  View
367782 71208 CVE-2004-0784 gaim-smiley-command-execution(17144)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63001 JVNDB-2004-000343 Gaim の顔文字テーマ機能における任意のコマンドを実行される脆弱性 ------------ CVE-2004-0784 9211 CVE-2004-0784 71208 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000343.html 2004-08-26 2007-04-01 View