CVSS: 9.8EPSS: 17%CPEs: 1EXPL: 1CVE-2005-2103 – Gaim AIM/ICQ Protocols - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2005-2103
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n. • https://www.exploit-db.com/exploits/26139 http://gaim.sourceforge.net/security/?id=22 http://www.novell.com/linux/security/advisories/2005_19_sr.html http://www.redhat.com/support/errata/RHSA-2005-589.html http://www.redhat.com/support/errata/RHSA-2005-627.html http://www.securityfocus.com/archive/1/426078/100/0/threaded http://www.securityfocus.com/bid/14531 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11477 https://usn.ubuntu • CWE-131: Incorrect Calculation of Buffer Size •
CVSS: 9.8EPSS: 42%CPEs: 1EXPL: 1CVE-2004-0005
https://notcve.org/view.php?id=CVE-2004-0005
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte. Múltiples desbordamientos de búfer en Gaim 0.75 pemite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante codificación octal en yahoo_decode que causa que un byte nulo sea escrito más allá del búfer, codificación octal en yahoo_decode que causa que un puntero referencie memoria más allá del byte nulo de terminación, una cadena imprimible entrecomillada pasada al decodificador MIME gaim_quotedp_decode que hace que un byte nulo sea escrito más allá del búfer, y codificación imprimible entrecomillada en gaim_quotedp_decode que causa que un puntero referencie memora más allá del byte nulo de terminación. • http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 http://marc.info/?l=bugtraq&m=107513690306318&w=2 http://security.e-matters.de/advisories/012004.html http://www.debian.org/security/2004/dsa-434 http://www.kb.cert.org/vuls/id/190366 http://www.kb.cert.org/vuls/id/226974 http://www.kb.cert.org/vuls/id/404470 http://www.kb.cert.org/vuls/id/655974 http://www.novell • CWE-193: Off-by-one Error •