CVE-2004-0007: rob_flynn gaim
CVSS: 7.5v2.0HighModified
Published 29-01-2004Last modified 08-08-2024
Vulnerability summary
CVE-2004-0007 is a high (CVSS 7.5) vulnerability in rob_flynn gaim. EPSS estimates a 7.18% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v2.0 (NVD)EPSS score
7.18%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 29-01-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
7.18%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.18% on 18-09-2026
18-09-202618-10-2026
EPSS score7.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Rob_flynn1 product
- gaim≤ 0.74
Ultramagnetic1 product
- ultramagnetic≤ 0.81
2 vendors · 2 products
References
20 links
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906VDB EntrySignatureX Refsource OVAL
- www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158Vendor AdvisoryX Refsource SLACKWARE
Show all 20 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819VDB EntrySignatureX Refsource OVAL