CVE-2004-0785

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.

• http://gaim.sourceforge.net/security/?id=3Patch, Vendor Advisory
• http://gaim.sourceforge.net/security/?id=4
• http://gaim.sourceforge.net/security/?id=5
• http://secunia.com/advisories/12383
• http://secunia.com/advisories/12480
• http://secunia.com/advisories/12929
• http://secunia.com/advisories/13101
• http://securitytracker.com/id?1011083
• http://www.fedoranews.org/updates/FEDORA-2004-278.shtmlPatch, Vendor Advisory
• http://www.fedoranews.org/updates/FEDORA-2004-279.shtmlPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200408-27.xmlVendor Advisory
• http://www.osvdb.org/9261
• http://www.osvdb.org/9262
• http://www.osvdb.org/9263
• http://www.redhat.com/support/errata/RHSA-2004-400.html
• http://www.securityfocus.com/bid/11056
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17141
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17142
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17143
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907
• http://gaim.sourceforge.net/security/?id=3Patch, Vendor Advisory
• http://gaim.sourceforge.net/security/?id=4
• http://gaim.sourceforge.net/security/?id=5
• http://secunia.com/advisories/12383
• http://secunia.com/advisories/12480
• http://secunia.com/advisories/12929
• http://secunia.com/advisories/13101
• http://securitytracker.com/id?1011083
• http://www.fedoranews.org/updates/FEDORA-2004-278.shtmlPatch, Vendor Advisory
• http://www.fedoranews.org/updates/FEDORA-2004-279.shtmlPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200408-27.xmlVendor Advisory
• http://www.osvdb.org/9261
• http://www.osvdb.org/9262
• http://www.osvdb.org/9263
• http://www.redhat.com/support/errata/RHSA-2004-400.html
• http://www.securityfocus.com/bid/11056
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17141
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17142
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17143
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907

Published

Oct 20, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0779The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 we…
• CVE-2004-0780Buffer overflow in uustat in Sun Solaris 8 and 9 allows loca…
• CVE-2004-0781Cross-site scripting (XSS) vulnerability in list.cgi in the …
• CVE-2004-0782Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the…
• CVE-2004-0783Stack-based buffer overflow in xpm_extract_color (io-xpm.c) …
• CVE-2004-0784The smiley theme functionality in Gaim before 0.82 allows re…
• CVE-2004-0786The IPv6 URI parsing routines in the apr-util library for Ap…
• CVE-2004-0787Cross-site scripting (XSS) vulnerability in the web frontend…
• CVE-2004-0788Integer overflow in the ICO image decoder for (1) gdk-pixbuf…
• CVE-2004-0789Multiple implementations of the DNS protocol, including (1) …
• CVE-2004-0790Multiple TCP/IP and ICMP implementations allow remote attack…
• CVE-2004-0791Multiple TCP/IP and ICMP implementations allow remote attack…