Lucene search

K
osvGoogleOSV:DSA-1610-1
HistoryJul 15, 2008 - 12:00 a.m.

gaim - execution of arbitrary code

2008-07-1500:00:00
Google
osv.dev
12

EPSS

0.115

Percentile

95.3%

It was discovered that gaim, an multi-protocol instant messaging client,
was vulnerable to several integer overflows in its MSN protocol handlers.
These could allow a remote attacker to execute arbitrary code.

For the stable distribution (etch), this problem has been fixed in version
1:2.0.0+beta5-10etch1.

For the unstable distribution (sid), this package is not present.

We recommend that you upgrade your gaim package.