CVE-2004-0785

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-20 · updated 2026-06-16

Description

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.

Affected products

Rob Flynn Gaim: 0.10, 0.10.3, 0.50, 0.51, 0.52, 0.53 (+23)

References

http://gaim.sourceforge.net/security/?id=3
http://gaim.sourceforge.net/security/?id=4
http://gaim.sourceforge.net/security/?id=5
http://secunia.com/advisories/12383
http://secunia.com/advisories/12480
http://secunia.com/advisories/12929
http://secunia.com/advisories/13101
http://securitytracker.com/id?1011083
http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
http://www.osvdb.org/9261

Get alerted when CVE-2004-0785 or the next vulnerability affects your stack