CyberSec.Space Logo
Back to CVE Browser

CVE-2000-1172

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0370%
EPSS Percentile7.70th
PublishedJan 9, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.

Affected Platforms (CPE)

📦
Rob Flynn

Gaim

= 0.10
📦
Rob Flynn

Gaim

= 0.10.3

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html
🔗 http://www.securityfocus.com/bid/1948
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html
🔗 http://www.securityfocus.com/bid/1948

Related Vulnerabilities

CVE-2009-269410.0

The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2...

CVE-2004-089110.0

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (applicati...

CVE-2005-21039.8

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application c...

CVE-2004-00059.8

Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via...