Skip to Content.
Sympa Menu

sm-security - [SM-Security] gaim vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] gaim vulnerabilities
  • Date: Fri, 13 May 2005 03:16:13 +0200

Synopsis
========
Gaim contains two vulnerabilities, potentially resulting in the
execution of arbitrary code or Denial of Service.

Background
==========
Gaim is an instant messenger client for several protocols.

Description
===========
Remote crash on some protocols (CAN-2005-1261) :
It is possible for a remote user to overflow a static buffer by sending
an IM containing a very large URL (greater than 8192 bytes) to the Gaim
user. This is not possible on all protocols, due to message length
restrictions. Jabber are SILC are known to be vulnerable.

MSN Remote DoS (CAN-2005-1262) :
Potential remote denial of service bug resulting from not checking a
pointer for non-NULL before passing it to strncmp, which results in a
crash. This can be triggered by a remote client sending an SLP message
with an empty body.


Affected packages
=================
gaim in all grimoires is affected.
This is now fixed in devel, test and stable grimoire.

Resolution
==========
All gaim users should upgrade to the latest available version:
#scribe update
#cast -c gaim

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36


Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] gaim vulnerabilities, Thomas Houssin, 05/12/2005

Archive powered by MHonArc 2.6.24.

Top of Page