Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade gaimUpgrade ja-gaimUpgrade ru-gaim | Dec 10, 2025 | Oct 25, 2004 |
| Gentoo Linux | — | Upgrade net-im/gaim. | Oct 30, 2017 | Jan 27, 2005 |
| Suse | — | Upgrade NetworkManager-develUpgrade gtk-sharp-32bitUpgrade contact-lookup-appletUpgrade samba-winbind-x86Upgrade gstreamer010-plugins-base-visual-32bitUpgrade libgail-gnome-develUpgrade gtk-sharp-gapiUpgrade libbeagle-develUpgrade samba-64bitUpgrade audit-libsUpgrade linphoneUpgrade samba-x86Upgrade helix-dbus-serverUpgrade art-sharpUpgrade libipoddevice-32bitUpgrade cifs-mountUpgrade audit-libs-pythonUpgrade libsmbclient-64bitUpgrade glib2-32bitUpgrade libtool-32bitUpgrade rsvg-sharpUpgrade dhcpUpgrade gdb-32bitUpgrade pwlibUpgrade gnome-sharpUpgrade audit-develUpgrade vte-sharpUpgrade libsmbclient-32bitUpgrade glib2-64bitUpgrade gdb-x86Upgrade plannerUpgrade dhcp-relayUpgrade resappletUpgrade libbeagle-x86Upgrade NetworkManager-vpncUpgrade gftpUpgrade dhcp-serverUpgrade glib2-develUpgrade dhcp-develUpgrade samba-clientUpgrade audit-libs-32bitUpgrade libtool-x86Upgrade gstreamer010-plugins-base-32bitUpgrade gdb-64bitUpgrade NetworkManager-gnomeUpgrade NetworkManager-glibUpgrade libtoolUpgrade libbeagle-32bitUpgrade evolution-pilotUpgrade libipoddeviceUpgrade libmsrpc-develUpgrade samba-32bitUpgrade audit-libs-x86Upgrade beagleUpgrade f-spotUpgrade libsmbclientUpgrade wbxml2Upgrade samba-winbind-32bitUpgrade evolution-exchangeUpgrade xglUpgrade libsmbclient-develUpgrade gstreamer010-plugins-base-x86Upgrade libbeagle-64bitUpgrade gaimUpgrade glade-sharpUpgrade dhcp-clientUpgrade evolution-webcalUpgrade inkscapeUpgrade sambaUpgrade openobexUpgrade gstreamer010-plugins-baseUpgrade gnome-backgroundsUpgrade gdbUpgrade samba-pythonUpgrade gnomedb-sharpUpgrade samba-client-32bitUpgrade gstreamer010-plugins-base-visualUpgrade gaim-develUpgrade openobex-develUpgrade gstreamer010-plugins-base-develUpgrade gtkhtml-sharpUpgrade beagle-evolutionUpgrade glib2-x86Upgrade compizUpgrade gnome-gamesUpgrade gstreamer010-plugins-base-oil-32bitUpgrade gnome-filesystemUpgrade libgdiplusUpgrade libtool-64bitUpgrade beagle-guiUpgrade planner-develUpgrade tomboyUpgrade gtk-sharpUpgrade gtk-sharp-completeUpgrade pwlib-develUpgrade samba-winbindUpgrade sabayonUpgrade evolution-develUpgrade samba-client-64bitUpgrade NetworkManagerUpgrade glib2-docUpgrade samba-pdbUpgrade beagle-firefoxUpgrade gda-sharpUpgrade gstreamer010-plugins-base-oilUpgrade libmsrpcUpgrade libbeagleUpgrade gnopernicusUpgrade sabayon-adminUpgrade samba-krb-printingUpgrade gstreamer010-plugins-base-64bitUpgrade samba-docUpgrade gstreamer010-plugins-base-docUpgrade xgl-hardware-listUpgrade samba-client-x86Upgrade samba-vscanUpgrade NetworkManager-openvpnUpgrade glib2Upgrade auditUpgrade gnopernicus-develUpgrade libsmbclient-x86Upgrade audit-libs-64bitUpgrade glib-sharpUpgrade libgail-gnomeUpgrade evolutionUpgrade diaUpgrade linphone-appletUpgrade samba-winbind-64bitUpgrade gconf-sharp | Feb 17, 2015 | Jan 27, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub