CVE-2004-0005 describes multiple buffer overflow vulnerabilities in Gaim version 0.75, specifically within its yahoo_decode and gaim_quotedp_decode MIME decoders. These flaws allow remote attackers to trigger a denial of service or potentially execute arbitrary code by crafting malicious octal or quoted printable encoded strings. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network without user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.75CPE matchmatch criteria | cpe:2.3:a:gaim_project:gaim:0.75:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.