CVE-2004-0500: Gentoo Linux

High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days.

Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.

Affected products

• Gentoo Linux: version 1.4 only
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Rob Flynn Gaim: version 0.10 only; version 0.10.3 only; version 0.50 only; version 0.51 only; version 0.52 only; version 0.53 only; …

Published 2004-09-28. Last modified 2026-06-16.