vulnwire
10.0crit

CVE-2004-0891

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash)…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.9%
percentile 94%
Public exploits
0
none known

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.

Exploit prediction (EPSS)

6.86% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/17787 · vdb-entry, x_refsource_XF, x_transferred
  • bugzilla.fedora.us /show_bug.cgi?id=2188 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200410-23.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • gaim.sourceforge.net /security/?id=9 · x_refsource_CONFIRM, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • ubuntu.com /usn/usn-8-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17790 · vdb-entry, x_refsource_XF, x_transferred
  • redhat.com /support/errata/RHSA-2004-604.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17786 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.