CVE:CVE-2004-0891
CNNVD:CNNVD-200501-302
Gaim是一款即时通信工具软件，是Pigdin的前身。
Gaim0.79至1.0.1版本在处理MSNSLP消息时存在缓冲区溢出漏洞。
远程攻击者可以利用特殊构建的畸形MSNSLP消息，触发溢出，导致程序坑归或执行任意代码。
solution:Upgrade rob_flynn gaim to a higher version than 0.10,0.10.3,0.50,0.51,0.52,0.53,0.54,0.55,0.56,0.57,0.58,0.59,0.59.1,0.60,0.61,0.62,0.63,0.64,0.65,0.66,0.67,0.68,0.69,0.70,0.71,0.72,0.73,0.74,0.75,0.78,0.82,0.82.1,1.0,1.0.1,and avoid the version 0.10,0.10.3,0.50,0.51,0.52,0.53,0.54,0.55,0.56,0.57,0.58,0.59,0.59.1,0.60,0.61,0.62,0.63,0.64,0.65,0.66,0.67,0.68,0.69,0.70,0.71,0.72,0.73,0.74,0.75,0.78,0.82,0.82.1,1.0,1.0.1; Upgrade gentoo linux to a higher version than *,1.4,and avoid the version 1.4; Upgrade slackware slackware_linux to a higher version than 9.0,9.1,10.0,current,and avoid the version 9.0,9.1,10.0,current; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1