• info
• discussion
• exploit
• solution
• references

Gaim Remote URI Handling Buffer Overflow Vulnerability

Solution:
Vendor upgrades are available. Please see the referenced advisories for more information.


Rob Flynn Gaim 0.10 x

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.50

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.51

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.52

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.53

• RedHat gaim-1.5.0-0.73.1.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/gaim-1.5.0-0. 73.1.legacy.i386.rpm


• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.54

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.55

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.56

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.59

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.59.1

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.60

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.61

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.62

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.63

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.64

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.65

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.70

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.71

• RedHat gaim-1.5.0-1.fc1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/gaim-1.5.0-1.fc 1.1.legacy.i386.rpm


• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.73

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.74

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.75

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.82

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 0.82.1

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 1.0.2

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 1.1.3

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download

Rob Flynn Gaim 1.1.4

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download


• Ubuntu gaim-data_1.1.4-1ubuntu4.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-data_1.1.4-1ub untu4.1_all.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_amd64.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_i386.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_ia64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_ia64.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_powerpc.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_amd64.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_i386.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_ia64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_ia64.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_powerpc.deb

Rob Flynn Gaim 1.2

• Rob Flynn gaim-1.3.0.tar.gz
  http://prdownloads.sourceforge.net/gaim/gaim-1.3.0.tar.gz?download