CVE-2004-0008
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers...
CVE-2004-0008 is a high vulnerability (CVSS 7.5) in Rob Flynn Gaim, published January 29, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.50%, the 95th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 8.50%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gaimDebian:3.0 From an advisory covering 4 CVEs | before 0.58-2.4 | 0.58-2.4 |
What each source reports
NVD Score used 7.5
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
- Record
CVE-2004-0008- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
- Record
CVE-2004-0008- Updated
- 2026-11-02
EUVDEUVD-2004-0008No score
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
- Record
EUVD-2004-0008- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6r82-pmh7-jjf5No score
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers...
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
- Record
GHSA-6r82-pmh7-jjf5- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=107522338611564&w=2
debian.org/security/2004/dsa-434
redhat.com/support/errata/RHSA-2004-032.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820
osvdb.org/3734
marc.info?l=bugtraq&m=107513690306318&w=2
Show 15 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469
ultramagnetic.sourceforge.net/advisories/001.html
security.gentoo.org/glsa/glsa-200401-04.xml
securitytracker.com/id?1008850
marc.info?l=bugtraq&m=107522432613022&w=2
security.e-matters.de/advisories/012004.html
redhat.com/support/errata/RHSA-2004-033.html
mandriva.com/security/advisories?name=MDKSA-2004:006
archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
exchange.xforce.ibmcloud.com/vulnerabilities/14937
kb.cert.org/vuls/id/779614
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000813
redhat.com/support/errata/RHSA-2004-045.html
nvd.nist.gov/vuln/detail/CVE-2004-0008
github.com/advisories/GHSA-6r82-pmh7-jjf5