Rob Flynn Gaim vulnerabilities

CVE-2005-2102 [MEDIUM] CVE-2005-2102: The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (applic The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters.

CVE-2005-0573 [MEDIUM] CVE-2005-0573: Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) vi Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis) characters.

CVE-2005-0965 [MEDIUM] CVE-2005-0965: The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote atta The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.

CVE-2004-2589 [MEDIUM] CVE-2004-2589: Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long H Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.

CVE-2005-1269 [MEDIUM] CVE-2005-1269: Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yah Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.

CVE-2002-0377 [LOW] CVE-2002-0377: Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp direct Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.