[ MDVSA-2009:127 ] gaim

[dude67]

_______________________________________________________________________

Package : gaim
Date : June 3, 2009
Affected: Corporate 3.0
_______________________________________________________________________

Problem Description:

It was discovered that Gaim did not properly handle certain malformed
messages in the MSN protocol handler. A remote attacker could send
a specially crafted message and possibly execute arbitrary code with
user privileges. (CVE-2008-2927)
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-2927
_______________________________________________________________________