VULNERABILITY INTELLIGENCE
CVE-2004-0006
CVSS score7.5 HIGH
EPSS probability7.61%
CISA KEVNot currently listed
Published2004-03-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — US Government Resource
- cve@mitre.org — US Government Resource