CVE-2004-0006

CVE-2004-0006 describes multiple buffer overflow vulnerabilities in Gaim 0.75 and earlier, and Ultramagnetic before 0.81. These flaws allow remote attackers to trigger denial of service and potentially execute arbitrary code through various vectors, including malformed Yahoo web connection cookies, long parameters in Yahoo login pages, YMSG packets, URL parsing, and HTTP proxy connections. The vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. Its FAUCET Risk Score is 94/100, highlighting significant risk. Despite its age, there is no evidence of active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. However, the vulnerability has garnered significant community discussion with 10 mentions, suggesting ongoing interest or analysis.