CVE-2004-0006: Buffer Overflow
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0006?
CVE-2004-0006 has a high severity rating due to the potential for remote code execution and denial of service.
How do I fix CVE-2004-0006?
To fix CVE-2004-0006, upgrade Gaim to version 0.76 or later and Ultramagnetic to version 0.81 or later.
What software is affected by CVE-2004-0006?
CVE-2004-0006 affects Gaim version 0.75 and earlier, as well as Ultramagnetic version 0.81 and earlier.
What types of attacks are possible with CVE-2004-0006?
CVE-2004-0006 allows remote attackers to exploit buffer overflows, leading to denial of service and potential arbitrary code execution.
Is there a workaround for CVE-2004-0006?
There are no known workarounds for CVE-2004-0006, so it is recommended to apply the software updates.