A local overflow exists in gaim. The msn_slp_sip_recv() function fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Solution
Upgrade to version 0.82 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the patch Gaim has released to address this vulnerability.
suse.de -
SuSE
