CVE-2004-0784

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-20 · updated 2026-06-16

Description

The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.

Affected products

Rob Flynn Gaim: 0.10, 0.10.3, 0.50, 0.51, 0.52, 0.53 (+23)

References

http://gaim.sourceforge.net/security/?id=1
http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
http://www.redhat.com/support/errata/RHSA-2004-400.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
http://gaim.sourceforge.net/security/?id=1
http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
http://www.redhat.com/support/errata/RHSA-2004-400.html

Get alerted when CVE-2004-0784 or the next vulnerability affects your stack