CVE-2004-0891

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-01-27 · updated 2026-06-16

Description

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.

Affected products

gentoo Linux: 1.4
Rob Flynn Gaim: 0.10, 0.10.3, 0.50, 0.51, 0.52, 0.53 (+28)
Slackware Linux: 9.0, 9.1, 10.0, current
Ubuntu Linux: 4.1

References

http://gaim.sourceforge.net/security/?id=9
http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml
http://www.redhat.com/support/errata/RHSA-2004-604.html
https://bugzilla.fedora.us/show_bug.cgi?id=2188
https://exchange.xforce.ibmcloud.com/vulnerabilities/17786
https://exchange.xforce.ibmcloud.com/vulnerabilities/17787
https://exchange.xforce.ibmcloud.com/vulnerabilities/17790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790
https://www.ubuntu.com/usn/usn-8-1/
http://gaim.sourceforge.net/security/?id=9
http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml
http://www.redhat.com/support/errata/RHSA-2004-604.html

Get alerted when CVE-2004-0891 or the next vulnerability affects your stack