>> Gaim Instant Messaging Denial of Service Vulnerabilities
Title : Gaim Instant Messaging Denial of Service Vulnerabilities VUPEN ID : VUPEN/ADV-2005-0181 CVE ID : GENERIC-MAP-NOMATCH CWE ID : CWE-
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-02-18
Technical Description
Two vulnerabilities were identified in Gaim, which may be exploited by malicious users to conduct Denial of Service attacks. The first flaw occurs when hadling malformed SNAC packets sent by other AIM or ICQ users, which can trigger an infinite loop in Gaim (the remote user would need a custom client, able to generate malformed SNACs). The second vulnerability occurs when receiving malformed HTML, which can result in an invalid memory access causing Gaim to crash.
