Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ru-gaimUpgrade ja-gaimUpgrade gaim | Dec 10, 2025 | Oct 25, 2004 |
| Gentoo Linux | — | Upgrade net-im/gaim. | Oct 30, 2017 | Jan 27, 2005 |
| Suse | — | Upgrade gdb-32bitUpgrade libmsrpc-develUpgrade libbeagle-32bitUpgrade audit-libsUpgrade evolution-pilotUpgrade gstreamer010-plugins-base-32bitUpgrade f-spotUpgrade samba-winbind-x86Upgrade NetworkManager-vpncUpgrade linphoneUpgrade glib2-64bitUpgrade cifs-mountUpgrade samba-64bitUpgrade libsmbclient-32bitUpgrade dhcpUpgrade gdb-64bitUpgrade libtoolUpgrade libipoddevice-32bitUpgrade art-sharpUpgrade libtool-x86Upgrade audit-libs-pythonUpgrade glib2-develUpgrade audit-develUpgrade vte-sharpUpgrade dhcp-develUpgrade libbeagle-x86Upgrade libbeagle-develUpgrade resappletUpgrade audit-libs-32bitUpgrade gdb-x86Upgrade samba-clientUpgrade gtk-sharp-gapiUpgrade audit-libs-x86Upgrade gtk-sharp-32bitUpgrade NetworkManager-develUpgrade plannerUpgrade libipoddeviceUpgrade libsmbclientUpgrade dhcp-relayUpgrade gstreamer010-plugins-base-visual-32bitUpgrade dhcp-serverUpgrade NetworkManager-glibUpgrade gftpUpgrade pwlibUpgrade libsmbclient-64bitUpgrade contact-lookup-appletUpgrade glib2-32bitUpgrade gnome-sharpUpgrade rsvg-sharpUpgrade libgail-gnome-develUpgrade helix-dbus-serverUpgrade NetworkManager-gnomeUpgrade samba-32bitUpgrade samba-x86Upgrade beagleUpgrade libtool-32bitUpgrade libmsrpcUpgrade NetworkManager-openvpnUpgrade gconf-sharpUpgrade gnome-filesystemUpgrade openobex-develUpgrade gstreamer010-plugins-baseUpgrade evolutionUpgrade gstreamer010-plugins-base-64bitUpgrade gdbUpgrade gnopernicusUpgrade planner-develUpgrade glib2Upgrade libgdiplusUpgrade gnopernicus-develUpgrade libtool-64bitUpgrade wbxml2Upgrade glib2-docUpgrade samba-pdbUpgrade NetworkManagerUpgrade evolution-develUpgrade glib-sharpUpgrade gstreamer010-plugins-base-visualUpgrade beagle-evolutionUpgrade samba-winbind-64bitUpgrade libsmbclient-x86Upgrade gstreamer010-plugins-base-develUpgrade samba-client-32bitUpgrade gstreamer010-plugins-base-oilUpgrade gnomedb-sharpUpgrade glib2-x86Upgrade samba-krb-printingUpgrade dhcp-clientUpgrade glade-sharpUpgrade xgl-hardware-listUpgrade samba-winbindUpgrade beagle-guiUpgrade audit-libs-64bitUpgrade gtkhtml-sharpUpgrade gnome-backgroundsUpgrade inkscapeUpgrade xglUpgrade evolution-webcalUpgrade gtk-sharp-completeUpgrade gaim-develUpgrade compizUpgrade gstreamer010-plugins-base-x86Upgrade samba-pythonUpgrade libbeagle-64bitUpgrade samba-client-64bitUpgrade gaimUpgrade gda-sharpUpgrade gnome-gamesUpgrade sambaUpgrade evolution-exchangeUpgrade diaUpgrade beagle-firefoxUpgrade libsmbclient-develUpgrade gtk-sharpUpgrade samba-winbind-32bitUpgrade samba-docUpgrade tomboyUpgrade pwlib-develUpgrade samba-client-x86Upgrade libbeagleUpgrade sabayon-adminUpgrade libgail-gnomeUpgrade samba-vscanUpgrade gstreamer010-plugins-base-docUpgrade sabayonUpgrade auditUpgrade openobexUpgrade linphone-appletUpgrade gstreamer010-plugins-base-oil-32bit | Feb 17, 2015 | Jan 27, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub