01 Record
CVE-2004-0005
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be
UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 11.21% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 95.5% of scored records. A rank, not a probability.
- NVD base score
- 9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2004-02-03 05:00Z22 YR AGO
- Last updated
- 2024-08-08 00:01Z2 YR AGO
- Reserved
- 2004-01-05
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-193Off-by-one ErrorBase
- Data version
- 5.1
- Document digest
- 58221b4d5d1b81017bf1d05e43fadc49dc9a2ef3409fa64dde68783aeeb8ccd7
05 Affected products
VendorProductVersionsPlatforms
06 References
- exchange.xforce.ibmcloud.comgaim-mime-decoder-oob(14944)https://exchange.xforce.ibmcloud.com/vulnerabilities/14944
- www.kb.cert.orgVU#226974http://www.kb.cert.org/vuls/id/226974
- www.debian.orgDSA-434http://www.debian.org/security/2004/dsa-434
- exchange.xforce.ibmcloud.comgaim-mime-decoder-bo(14942)https://exchange.xforce.ibmcloud.com/vulnerabilities/14942
- www.novell.comSuSE-SA:2004:004http://www.novell.com/linux/security/advisories/2004_04_gaim.html
- www.slackware.comSSA:2004-026http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158
- exchange.xforce.ibmcloud.comgaim-yahoodecode-offbyone-bo(14935)https://exchange.xforce.ibmcloud.com/vulnerabilities/14935
- marc.info20040126 Advisory 01/2004: 12 x Gaim remote overflowshttp://marc.info/?l=bugtraq&m=107513690306318&w=2
- security.gentoo.orgGLSA-200401-04https://security.gentoo.org/glsa/200401-04
- www.securitytracker.com1008850http://www.securitytracker.com/id?1008850
- security.e-matters.dehttp://security.e-matters.de/advisories/012004.html
- www.osvdb.org3736http://www.osvdb.org/3736
- archives.neohapsis.com20040126 Advisory 01/2004: 12 x Gaim remote overflowshttp://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
- www.kb.cert.orgVU#655974http://www.kb.cert.org/vuls/id/655974
- www.kb.cert.orgVU#190366http://www.kb.cert.org/vuls/id/190366
- distro.conectiva.com.brCLA-2004:813http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813
- www.kb.cert.orgVU#404470http://www.kb.cert.org/vuls/id/404470
- exchange.xforce.ibmcloud.comgaim-sscanf-oob(14938)https://exchange.xforce.ibmcloud.com/vulnerabilities/14938