Every CVE whose affected-product data names Rob Flynn Gaim, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (26)
CVE-2000-1172 — CVSS 10.0 (critical): Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly…
CVE-2004-0891 — CVSS 10.0 (critical): Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash)…
CVE-2004-0006 — CVSS 7.5 (high): Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and…
CVE-2004-0007 — CVSS 7.5 (high): Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic…
CVE-2004-0008 — CVSS 7.5 (high): Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly…
CVE-2002-0384 — CVSS 7.5 (high): Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.
CVE-2005-1261 — CVSS 7.5 (high): Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an…
CVE-2004-0754 — CVSS 7.5 (high): Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size…
CVE-2004-0784 — CVSS 7.5 (high): The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
CVE-2004-0785 — CVSS 7.5 (high): Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via…
CVE-2004-0500 — CVSS 7.5 (high): Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of…
CVE-2002-0989 — CVSS 7.5 (high): The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell…
CVE-2005-0966 — CVSS 6.4 (medium): The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via…
CVE-2005-2370 — CVSS 5.0 (medium): Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers…
CVE-2004-2589 — CVSS 5.0 (medium): Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes…
CVE-2005-0208 — CVSS 5.0 (medium): The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML…
CVE-2005-0472 — CVSS 5.0 (medium): Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.
CVE-2005-0473 — CVSS 5.0 (medium): The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML…
CVE-2005-0573 — CVSS 5.0 (medium): Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename…
CVE-2005-0965 — CVSS 5.0 (medium): The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service…
CVE-2005-0967 — CVSS 5.0 (medium): Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user…
CVE-2005-1262 — CVSS 5.0 (medium): Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.
CVE-2005-1269 — CVSS 5.0 (medium): Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters…
CVE-2005-1934 — CVSS 5.0 (medium): Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory…
CVE-2005-2102 — CVSS 5.0 (medium): The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that…
CVE-2002-0377 — CVSS 2.1 (low): Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access…