• info
• discussion
• exploit
• solution
• references

Gaim Multiple Remote Denial of Service Vulnerabilities

Gaim is prone to multiple remote denial-of-service vulnerabilities. These issues can allow remote attackers to crash an affected client.

The following specific issues were identified:

- Remote AIM or ICQ users may trigger a crash in a client by sending malformed SNAC packets.

- Another vulnerability in the client arises during the parsing of malformed HTML data.

Gaim versions prior to 1.1.3 are affected by these issues.