CVE-2004-0007
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in...
CVE-2004-0007 is a high vulnerability (CVSS 7.5) in Rob Flynn Gaim, published January 29, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.18%, the 94th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 7.18%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gaimDebian:3.0 From an advisory covering 4 CVEs | before 0.58-2.4 | 0.58-2.4 |
What each source reports
NVD Score used
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- Record
CVE-2004-0007- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- Record
CVE-2004-0007- Updated
- 2026-11-02
EUVDEUVD-2004-0007No score
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- Record
EUVD-2004-0007- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-364g-x2w9-9jh7No score
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in...
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- Record
GHSA-364g-x2w9-9jh7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/9489
debian.org/security/2004/dsa-434
redhat.com/support/errata/RHSA-2004-032.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906
slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158
marc.info?l=bugtraq&m=107513690306318&w=2
Show 16 moreShow less
ultramagnetic.sourceforge.net/advisories/001.html
security.gentoo.org/glsa/glsa-200401-04.xml
securitytracker.com/id?1008850
security.e-matters.de/advisories/012004.html
osvdb.org/3733
mandriva.com/security/advisories?name=MDKSA-2004:006
kb.cert.org/vuls/id/197142
archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000813
exchange.xforce.ibmcloud.com/vulnerabilities/14946
nvd.nist.gov/vuln/detail/CVE-2004-0007
github.com/advisories/GHSA-364g-x2w9-9jh7