CVE-2004-0891

Published: Jan 27, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.

Affected (42)

Products: Rob Flynn: Gaim · Gentoo: Linux · Slackware: Slackware Linux · +1 more

Show all products

Rob Flynn: Gaim · Gentoo: Linux · Slackware: Slackware Linux · Ubuntu: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Rob Flynn Gaim	Version 0.10.3
Rob Flynn Gaim	Version 0.10
Rob Flynn Gaim	Version 0.50
Rob Flynn Gaim	Version 0.51
Rob Flynn Gaim	Version 0.52
Rob Flynn Gaim	Version 0.53
Rob Flynn Gaim	Version 0.54
Rob Flynn Gaim	Version 0.55
Rob Flynn Gaim	Version 0.56
Rob Flynn Gaim	Version 0.57
Rob Flynn Gaim	Version 0.58
Rob Flynn Gaim	Version 0.59.1
Rob Flynn Gaim	Version 0.59
Rob Flynn Gaim	Version 0.60
Rob Flynn Gaim	Version 0.61
Rob Flynn Gaim	Version 0.62
Rob Flynn Gaim	Version 0.63
Rob Flynn Gaim	Version 0.64
Rob Flynn Gaim	Version 0.65
Rob Flynn Gaim	Version 0.66
Rob Flynn Gaim	Version 0.67
Rob Flynn Gaim	Version 0.68
Rob Flynn Gaim	Version 0.69
Rob Flynn Gaim	Version 0.70
Rob Flynn Gaim	Version 0.71
Rob Flynn Gaim	Version 0.72
Rob Flynn Gaim	Version 0.73
Rob Flynn Gaim	Version 0.74
Rob Flynn Gaim	Version 0.75
Rob Flynn Gaim	Version 0.78
Rob Flynn Gaim	Version 0.82.1
Rob Flynn Gaim	Version 0.82
Rob Flynn Gaim	Version 1.0.1
Rob Flynn Gaim	Version 1.0

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Gentoo Linux	All versions
Gentoo Linux	Version 1.4
Slackware Slackware Linux	Version 10.0
Slackware Slackware Linux	Version 9.0
Slackware Slackware Linux	Version 9.1
Slackware Slackware Linux	Version current
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 4.1