CVE-2004-0891

CVE-2004-0891 describes a critical buffer overflow vulnerability in the MSN protocol handler of gaim versions 0.79 to 1.0.1, impacting distributions like Gentoo, Slackware, and Ubuntu. This flaw, triggered by an "unexpected sequence of MSNSLP messages," allows remote attackers to cause a denial of service and potentially execute arbitrary code. With a CVSS score of 10.0 and a FAUCET Risk Score of 94/100, it represents a severe threat due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking public Metasploit or ExploitDB modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness and potential for exploitation.