Gentoo: GLSA-200401-04 Normal: GAIM 0.75 Remote Overflow Advisory

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200401-04
~                                            https://security.gentoo.org/

~  Severity: Normal
~     Title: GAIM 0.75 Remote overflows
~      Date: January 27, 2004
~      Bugs: #39470
~        ID: 200401-04


Synopsis
=======
Various overflows in the handling of AIM DirectIM packets was revealed
in GAIM that could lead to a remote compromise of the IM client.

Background
=========
Gaim is a multi-platform and multi-protocol instant messaging client. It
is compatible with AIM , ICQ, MSN Messenger, Yahoo, IRC, Jabber,
Gadu-Gadu, and the Zephyr networks.

==========
Yahoo changed the authentication methods to their IM servers, rendering
GAIM useless. The GAIM team released a rushed release solving this
issue, however, at the same time a code audit revealed 12
vulnerabilities [ 1 ].

Impact
=====
Due to the nature of instant messaging many of these bugs require
man-in-the-mid...
Read the Full Advisory