FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

gaim -- MSN Remote DoS vulnerability

Affected packages
gaim < 1.3.1
ja-gaim < 1.3.1
ko-gaim < 1.3.1
ru-gaim < 1.3.1

Details

VuXML ID b6612eee-df5f-11d9-b875-0001020eed82
Discovery 2005-06-10
Entry 2005-06-17

The GAIM team reports:

Remote attackers can cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error.

References

Bugtraq ID 13932
CVE Name CVE-2005-1934
URL http://gaim.sourceforge.net/security/index.php?id=19