Description
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/9489 ↗
- http://www.debian.org/security/2004/dsa-434 ↗
- http://www.redhat.com/support/errata/RHSA-2004-032.html ↗
- http://www.novell.com/linux/security/advisories/2004_04_gaim.html ↗
- http://www.osvdb.org/3732 ↗
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818 ↗
- http://www.kb.cert.org/vuls/id/871838 ↗
- http://www.kb.cert.org/vuls/id/444158 ↗
- http://marc.info/?l=bugtraq&m=107513690306318&w=2 ↗
- http://www.kb.cert.org/vuls/id/297198 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14941 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222 ↗
- http://ultramagnetic.sourceforge.net/advisories/001.html ↗
- http://security.gentoo.org/glsa/glsa-200401-04.xml ↗
- http://www.securitytracker.com/id?1008850 ↗
- http://marc.info/?l=bugtraq&m=107522432613022&w=2 ↗
- http://security.e-matters.de/advisories/012004.html ↗
- http://www.redhat.com/support/errata/RHSA-2004-033.html ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14939 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14947 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14940 ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html ↗
- http://www.kb.cert.org/vuls/id/527142 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14945 ↗
- http://www.kb.cert.org/vuls/id/371382 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14943 ↗
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 ↗
- http://www.osvdb.org/3731 ↗
- http://www.kb.cert.org/vuls/id/503030 ↗
- http://www.redhat.com/support/errata/RHSA-2004-045.html ↗