OSVDB ID: 8382

Title: Gaim msn_slp_sip_recv() Function Overflow

Info

Disclosure

Aug 05, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A local overflow exists in gaim. The msn_slp_sip_recv() function fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 0.82 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the patch Gaim has released to address this vulnerability.

Products

Rob Flynn

gaim

0.80

References

Credit

  • Sebastian Krahmer - krahmersuse.de - SuSE


Direct URL: http://osvdb.org/8382