CVE-2004-0784

Description

The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008

https://exchange.xforce.ibmcloud.com/vulnerabilities/17144

http://www.redhat.com/support/errata/RHSA-2004-400.html

http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml

http://www.fedoranews.org/updates/FEDORA-2004-279.shtml

http://www.fedoranews.org/updates/FEDORA-2004-278.shtml

http://gaim.sourceforge.net/security/?id=1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3