Description
Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.
References
- 9261 vdb-entry
- 9263 vdb-entry
- gaim-hostname-bo(17142) vdb-entry
- FEDORA-2004-278 vendor-advisory
- http://gaim.sourceforge.net/security/?id=5
- 12480 third-party-advisory
- http://gaim.sourceforge.net/security/?id=3
- FEDORA-2004-279 vendor-advisory
- 13101 third-party-advisory
- GLSA-200408-27 vendor-advisory
- 9262 vdb-entry
- gaim-rtf-bo(17141) vdb-entry
- 12929 third-party-advisory
- gaim-url-bo(17143) vdb-entry
- 1011083 vdb-entry
- oval:org.mitre.oval:def:10907 vdb-entry signature
- RHSA-2004:400 vendor-advisory
- http://gaim.sourceforge.net/security/?id=4
- 11056 vdb-entry
- 12383 third-party-advisory