Rob Flynn Gaim vulnerabilities

CVE-2004-0008 [HIGH] CVE-2004-0008: Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

CVE-2004-0006 [HIGH] CVE-2004-0006: Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote atta Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and

CVE-2002-0384 [HIGH] CVE-2002-0384: Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arb Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.

CVE-2002-0989 [HIGH] CVE-2002-0989: The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execu The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.

CVE-2002-0377 [LOW] CVE-2002-0377: Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp direct Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.

CVE-2000-1172 [CRITICAL] CVE-2000-1172: Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to condu Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.