| Vulnerability Name: | CVE-2004-0007 (CCN-14946) | ||||||||||||||||||||||||
| Assigned: | 2004-01-26 | ||||||||||||||||||||||||
| Published: | 2004-01-26 | ||||||||||||||||||||||||
| Updated: | 2017-10-11 | ||||||||||||||||||||||||
| Summary: | Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Mon Jan 26 2004 - 02:44:42 CST Advisory 01/2004: 12 x Gaim remote overflows Source: FULLDISC Type: UNKNOWN 20040126 Advisory 01/2004: 12 x Gaim remote overflows Source: MITRE Type: CNA CVE-2004-0007 Source: CONECTIVA Type: UNKNOWN CLA-2004:813 Source: CCN Type: Conectiva Linux Security Announcement CLSA-2004:813 gaim Source: CCN Type: Sourceforge Gaim Web site Downloads Source: BUGTRAQ Type: UNKNOWN 20040126 Advisory 01/2004: 12 x Gaim remote overflows Source: BUGTRAQ Type: UNKNOWN 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code Source: CCN Type: RHSA-2004-032 Updated Gaim packages fix various vulnerabiliies Source: CCN Type: RHSA-2004-033 gaim security update Source: MISC Type: Patch, Vendor Advisory http://security.e-matters.de/advisories/012004.html Source: GENTOO Type: UNKNOWN GLSA-200401-04 Source: CCN Type: SECTRACK ID: 1008850 Gaim Contains Multiple Overflows That Let a Remote User Execute Arbitrary Code Source: CONFIRM Type: Patch, Vendor Advisory http://ultramagnetic.sourceforge.net/advisories/001.html Source: DEBIAN Type: Patch, Vendor Advisory DSA-434 Source: DEBIAN Type: DSA-434 gaim -- several vulnerabilities Source: CCN Type: US-CERT VU#197142 Gaim contains a buffer overflow vulnerability in the Extract Info Field function Source: CERT-VN Type: US Government Resource VU#197142 Source: CCN Type: Gentoo Linux Security Announcement 200401-04 GAIM 0.75 Remote overflows Source: MANDRAKE Type: UNKNOWN MDKSA-2004:006 Source: OSVDB Type: UNKNOWN 3733 Source: CCN Type: OSVDB ID: 3733 Gaim Extract Info Field Function Buffer Overflow Source: REDHAT Type: UNKNOWN RHSA-2004:032 Source: REDHAT Type: Patch, Vendor Advisory RHSA-2004:033 Source: SUSE Type: UNKNOWN SuSE-SA:2004:004 Source: BID Type: UNKNOWN 9489 Source: CCN Type: BID-9489 Gaim Multiple Remote Boundary Condition Error Vulnerabilities Source: SECTRACK Type: UNKNOWN 1008850 Source: SLACKWARE Type: UNKNOWN SSA:2004-026 Source: CCN Type: slackware-security Mailing List, Mon, 26 Jan 2004 16:14:45 -0800 (PST) GAIM security update (SSA:2004-026-01) Source: XF Type: UNKNOWN gaim-extractinfo-bo(14946) Source: XF Type: UNKNOWN gaim-extractinfo-bo(14946) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:819 Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:9906 | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||