CVE-2005-2103
CriticalSummary
In Gaim before version 1.5.0, a buffer overflow exists in the AIM and ICQ module. A remote attacker can exploit an away message containing a large number of AIM substitution strings (e.g., %t or %n), causing an application crash and potentially arbitrary code execution.
Risk Assessment
The risk includes denial of service (application crash) and potential remote code execution, allowing an attacker to compromise the victim's system.
Recommendation
Immediately update Gaim to version 1.5.0 or later, which fixes this vulnerability.
Original NVD description (English source)
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.