Vulnerabilities (CVE)

Filtered by vendor Rob Flynn Subscribe
Filtered by product Gaim
Total 27 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0500 3 Gentoo, Mandrakesoft, Rob Flynn 3 Linux, Mandrake Linux, Gaim 2025-04-03 7.5 HIGH N/A
Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.
CVE-2005-2102 1 Rob Flynn 1 Gaim 2025-04-03 5.0 MEDIUM N/A
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters.
CVE-2005-2103 1 Rob Flynn 1 Gaim 2025-04-03 7.5 HIGH 9.8 CRITICAL
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.
CVE-2005-1269 1 Rob Flynn 1 Gaim 2025-04-03 5.0 MEDIUM N/A
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.
CVE-2005-0965 1 Rob Flynn 1 Gaim 2025-04-03 5.0 MEDIUM N/A
The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.
CVE-2004-0006 2 Rob Flynn, Ultramagnetic 2 Gaim, Ultramagnetic 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
CVE-2005-0967 1 Rob Flynn 1 Gaim 2025-04-03 5.0 MEDIUM N/A
Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.