Description
Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.
References
- MDKSA-2005:071 vendor-advisory
- FLSA:158543 vendor-advisory
- http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235
- oval:org.mitre.oval:def:9657 vdb-entry signature
- http://gaim.sourceforge.net/security/?id=15
- 14815 third-party-advisory
- RHSA-2005:365 vendor-advisory
- 13004 vdb-entry
- SUSE-SA:2005:036 vendor-advisory
- 1013645 vdb-entry