彙總 rob_flynn 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 緩衝區溢位、記憶體損壞、拒絕服務與整數處理缺陷 等問題，部分漏洞可能導致 應用程式崩潰，並影響 軟體部署與生產負載 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2005-2102 | The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters. | [email protected] | 5.0 | 1.89% | 2005-08-16 | 2026-06-16 |
| CVE-2005-2370 | Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message. | [email protected] | 5.0 | 2.32% | 2005-07-26 | 2026-06-16 |
| CVE-2005-1269 | Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name. | [email protected] | 5.0 | 2.51% | 2005-06-16 | 2026-06-16 |
| CVE-2005-1934 | Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error. | [email protected] | 5.0 | 2.38% | 2005-05-19 | 2026-06-16 |
| CVE-2005-1262 | Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message. | [email protected] | 5.0 | 1.90% | 2005-05-11 | 2026-06-16 |
| CVE-2005-1261 | Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL. | [email protected] | 7.5 | 12.40% | 2005-05-11 | 2026-06-16 |
| CVE-2005-0967 | Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read. | [email protected] | 5.0 | 2.50% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0966 | The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions. | [email protected] | 6.4 | 2.48% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0965 | The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read. | [email protected] | 5.0 | 2.32% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0573 | Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis) characters. | [email protected] | 5.0 | 1.26% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0208 | The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473. | [email protected] | 5.0 | 3.20% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0473 | The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208. | [email protected] | 5.0 | 3.48% | 2005-03-14 | 2026-06-16 |
| CVE-2005-0472 | Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ. | [email protected] | 5.0 | 5.30% | 2005-03-14 | 2026-06-16 |
| CVE-2004-0891 | Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer. | [email protected] | 10.0 | 6.86% | 2005-01-27 | 2026-06-16 |
| CVE-2004-2589 | Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory. | [email protected] | 5.0 | 1.54% | 2004-12-31 | 2026-06-16 |
| CVE-2004-0785 | Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder. | [email protected] | 7.5 | 5.43% | 2004-10-20 | 2026-06-16 |
| CVE-2004-0784 | The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector. | [email protected] | 7.5 | 2.34% | 2004-10-20 | 2026-06-16 |
| CVE-2004-0754 | Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages. | [email protected] | 7.5 | 4.45% | 2004-10-20 | 2026-06-16 |
| CVE-2004-0500 | Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call. | [email protected] | 7.5 | 4.95% | 2004-09-28 | 2026-06-16 |
| CVE-2004-0008 | Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow. | [email protected] | 7.5 | 8.50% | 2004-03-03 | 2026-06-16 |