Gaim Smiley Theme Filename Input Validation Error Permits Arbitrary Code Execution
|
|
SecurityTracker Alert ID: 1011082
|
|
SecurityTracker URL: http://securitytracker.com/id?1011082
|
|
CVE Reference: CAN-2004-0784
(Links to External Site)
|
|
OSVDB Reference: 9259
(Links to External Site)
|
Date: Aug 28 2004
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 0.82
|
Description: A vulnerability was reported in Gaim in the installation of smiley theme files. A remote user can create a specially named file that, when installed, will execute arbitrary code on the target user's system.
The vendor reported that if a target user drags a smiley theme tar file to the Gaim application, the application executes a tar command
on the filename without properly validating the filename. If the filename is specially crafted, arbitrary code execution is possible.
|
Impact: A remote user can create a specially named smiley theme tar file that, when installed by the target user with a drag and drop method,
will cause arbitrary code to be executed on the target user's computer. The code will run with the privileges of the target user's
Gaim application.
|
Solution: The vendor has released a fixed version (0.82), available at:
http://gaim.sourceforge.net/downloads.php
|
Vendor URL: gaim.sourceforge.net/security/index.php?id=1 (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
