Description
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | gaim | 0.58-2.4 | DSA-434 |
Advisories 1
- DSA-434 gaim - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 9489 vdb-entry
- DSA-434 vendor-advisory
- RHSA-2004:032 vendor-advisory
- oval:org.mitre.oval:def:9906 vdb-entry signature
- SSA:2004-026 vendor-advisory
- 20040126 Advisory 01/2004: 12 x Gaim remote overflows mailing-list
- http://ultramagnetic.sourceforge.net/advisories/001.html
- GLSA-200401-04 vendor-advisory
- 1008850 vdb-entry
- 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code mailing-list
- http://security.e-matters.de/advisories/012004.html
- RHSA-2004:033 vendor-advisory
- 3733 vdb-entry
- MDKSA-2004:006 vendor-advisory
- oval:org.mitre.oval:def:819 vdb-entry signature
- VU#197142 third-party-advisory
- 20040126 Advisory 01/2004: 12 x Gaim remote overflows mailing-list
- SuSE-SA:2004:004 vendor-advisory
- CLA-2004:813 vendor-advisory
- gaim-extractinfo-bo(14946) vdb-entry