Description
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | gaim | 0.58-2.4 | DSA-434 |
Advisories 1
- DSA-434 gaim - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20040127 [slackware-security] GAIM security update (SSA:2004-026-01) mailing-list
- DSA-434 vendor-advisory
- RHSA-2004:032 vendor-advisory
- oval:org.mitre.oval:def:820 vdb-entry signature
- 3734 vdb-entry
- 20040126 Advisory 01/2004: 12 x Gaim remote overflows mailing-list
- oval:org.mitre.oval:def:9469 vdb-entry signature
- http://ultramagnetic.sourceforge.net/advisories/001.html
- GLSA-200401-04 vendor-advisory
- 1008850 vdb-entry
- 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code mailing-list
- http://security.e-matters.de/advisories/012004.html
- RHSA-2004:033 vendor-advisory
- MDKSA-2004:006 vendor-advisory
- 20040126 Advisory 01/2004: 12 x Gaim remote overflows mailing-list
- gaim-directim-bo(14937) vdb-entry
- VU#779614 third-party-advisory
- CLA-2004:813 vendor-advisory
- RHSA-2004:045 vendor-advisory