A remote overflow exists in Gaim. Gaim fails to check the length of the destination buffer, when receiveing a reply to a DNS lookup of the local host name resulting in a buffer overflow. With a specially crafted request, an attacker can compromise the system resulting in a loss of integrity.

Upgrade to version 0.82 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1011083
• Secunia Advisory ID: 12382 12383 13101
• CVE ID: 2004-0785 (see also: NVD)
• Related OSVDB ID: 9261 9263
• Other Advisory URL: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000884
  http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.375602
• Vendor URL: http://gaim.sourceforge.net/
  http://gaim.sourceforge.net/security/index.php?id=4
• Vendor Specific Advisory URL: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:110
• RedHat RHSA: RHSA-2004:400-15

Unknown or Incomplete