OSVDB ID: 9264 Title: Gaim Content-Length Header DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Gaim contains a flaw that may allow a remote denial of service. The issue is triggered when a malicious user sends an overly large content-length header value and gaim tries to allocate buffer big enough to store the content. If value exceedes amount of available memory gaim will crash and will result in loss of availability for the system. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Unavailable Disclosure: OSVDB Verified |
Solution |
Upgrade to version 0.82 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
hotpop.com -