CVE-2004-2589: Medium severity Rob Flynn Gaim vulnerability
Published Dec 31, 2004
·Updated
Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.
Affected Software
36 affected components
Rob Flynn Gaim=0.10
Rob Flynn Gaim=0.10.3
Rob Flynn Gaim=0.50
Rob Flynn Gaim=0.51
Rob Flynn Gaim=0.52
Rob Flynn Gaim=0.53
Rob Flynn Gaim=0.54
Rob Flynn Gaim=0.55
Rob Flynn Gaim=0.56
Rob Flynn Gaim=0.57
Rob Flynn Gaim=0.58
Rob Flynn Gaim=0.59
Rob Flynn Gaim=0.59.1
Rob Flynn Gaim=0.60
Rob Flynn Gaim=0.61
Rob Flynn Gaim=0.62
Rob Flynn Gaim=0.63
Rob Flynn Gaim=0.64
Rob Flynn Gaim=0.65
Rob Flynn Gaim=0.66
Rob Flynn Gaim=0.67
Rob Flynn Gaim=0.68
Rob Flynn Gaim=0.69
Rob Flynn Gaim=0.70
Rob Flynn Gaim=0.71
Rob Flynn Gaim=0.72
Rob Flynn Gaim=0.73
Rob Flynn Gaim=0.74
Rob Flynn Gaim=0.75
Rob Flynn Gaim=0.76
Rob Flynn Gaim=0.77
Rob Flynn Gaim=0.78
Rob Flynn Gaim=0.79
Rob Flynn Gaim=0.80
Rob Flynn Gaim=0.81
Rob Flynn Gaim=0.82
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Nov 29, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2589?
CVE-2004-2589 is considered a denial of service vulnerability that can lead to application crashes.
2
How do I fix CVE-2004-2589?
To fix CVE-2004-2589, upgrade Gaim to version 0.82 or later where the vulnerability has been addressed.
3
What versions of Gaim are affected by CVE-2004-2589?
CVE-2004-2589 affects Gaim versions before 0.82, specifically from 0.10 to 0.81.
4
What kind of attack can exploit CVE-2004-2589?
CVE-2004-2589 can be exploited by sending a specially crafted long HTTP Content-Length header to the Gaim application.
5
Is there a patch available for CVE-2004-2589?
Yes, upgrading to Gaim version 0.82 or later serves as a patch for CVE-2004-2589.