CVE-2004-0007

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-03-03 · updated 2026-06-16

Description

Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

Rob Flynn Gaim: through 0.74
Ultramagnetic: through 0.81

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813
http://marc.info/?l=bugtraq&m=107513690306318&w=2
http://marc.info/?l=bugtraq&m=107522432613022&w=2
http://security.e-matters.de/advisories/012004.html
http://security.gentoo.org/glsa/glsa-200401-04.xml
http://ultramagnetic.sourceforge.net/advisories/001.html
http://www.debian.org/security/2004/dsa-434
http://www.kb.cert.org/vuls/id/197142
http://www.mandriva.com/security/advisories?name=MDKSA-2004:006
http://www.osvdb.org/3733
http://www.redhat.com/support/errata/RHSA-2004-032.html

Get alerted when CVE-2004-0007 or the next vulnerability affects your stack