CVE-2004-0008
published 2004-03-03CVE-2004-0008: Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary…
PriorityP337high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
8.50%
94.4th percentile
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| rob_flynn | gaim | <= 0.74 | — |
| ultramagnetic | ultramagnetic | <= 0.81 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2004-01-26·CVSS 7.5
CVE-2004-0008 [HIGH] security flaw
security flaw
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
GHSA
GHSA-6r82-pmh7-jjf5: Integer overflow in Gaim 0
ghsa_unreviewed·2022-05-03
CVE-2004-0008 [HIGH] GHSA-6r82-pmh7-jjf5: Integer overflow in Gaim 0
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
No detection rules found.
No public exploits indexed.
ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.ascftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.aschttp://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.htmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813http://marc.info/?l=bugtraq&m=107513690306318&w=2http://marc.info/?l=bugtraq&m=107522338611564&w=2http://marc.info/?l=bugtraq&m=107522432613022&w=2http://security.e-matters.de/advisories/012004.htmlhttp://security.gentoo.org/glsa/glsa-200401-04.xmlhttp://ultramagnetic.sourceforge.net/advisories/001.htmlhttp://www.debian.org/security/2004/dsa-434http://www.kb.cert.org/vuls/id/779614http://www.mandriva.com/security/advisories?name=MDKSA-2004:006http://www.osvdb.org/3734http://www.redhat.com/support/errata/RHSA-2004-032.htmlhttp://www.redhat.com/support/errata/RHSA-2004-033.htmlhttp://www.redhat.com/support/errata/RHSA-2004-045.htmlhttp://www.securitytracker.com/id?1008850https://exchange.xforce.ibmcloud.com/vulnerabilities/14937https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.ascftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.aschttp://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.htmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813http://marc.info/?l=bugtraq&m=107513690306318&w=2http://marc.info/?l=bugtraq&m=107522338611564&w=2http://marc.info/?l=bugtraq&m=107522432613022&w=2http://security.e-matters.de/advisories/012004.htmlhttp://security.gentoo.org/glsa/glsa-200401-04.xmlhttp://ultramagnetic.sourceforge.net/advisories/001.htmlhttp://www.debian.org/security/2004/dsa-434http://www.kb.cert.org/vuls/id/779614http://www.mandriva.com/security/advisories?name=MDKSA-2004:006http://www.osvdb.org/3734http://www.redhat.com/support/errata/RHSA-2004-032.htmlhttp://www.redhat.com/support/errata/RHSA-2004-033.htmlhttp://www.redhat.com/support/errata/RHSA-2004-045.htmlhttp://www.securitytracker.com/id?1008850https://exchange.xforce.ibmcloud.com/vulnerabilities/14937https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469
2004-03-03
Published