Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2004-0785

26
FAUCET Score

CVE-2004-0785 describes multiple buffer overflow vulnerabilities in Gaim versions prior to 0.82. These flaws could be triggered remotely by specially crafted Rich Text Format (RTF) messages, an excessively long hostname, or an improperly handled long URL. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for denial of service and arbitrary code execution. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, indicating notable attention.

Impacted Technologies

VendorProductVersion(s)CPE
0.10CPE matchmatch criteria
cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*
0.10.3CPE matchmatch criteria
cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*
0.50CPE matchmatch criteria
cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*
0.51CPE matchmatch criteria
cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*
0.52CPE matchmatch criteria
cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.43%
Probability of exploitation in next 30 days
EPSS Percentile
91.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0543 is in the 86th percentile among its peer group of 51,466 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2004-0785

security flaw

Aug 12, 2004

References

gaim.sourceforge.net / security
PatchVendor Advisory
gaim.sourceforge.net / security
gaim.sourceforge.net / security
secunia.com / advisories/12383
secunia.com / advisories/12480
secunia.com / advisories/12929
secunia.com / advisories/13101
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/17141
exchange.xforce.ibmcloud.com / vulnerabilities/17142
exchange.xforce.ibmcloud.com / vulnerabilities/17143
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907
fedoranews.org / updates/FEDORA-2004-278.shtml
PatchVendor Advisory
fedoranews.org / updates/FEDORA-2004-279.shtml
PatchVendor Advisory
gentoo.org / security/en/glsa/glsa-200408-27.xml
Vendor Advisory
osvdb.org / 9261
osvdb.org / 9262
osvdb.org / 9263
redhat.com / support/errata/RHSA-2004-400.html
securityfocus.com / bid/11056