independent-20041019-00

NOTE: This issue was not reported to a security reporting body.

Summary MSN File transfer DOS (malloc error)
Date 2004-10-19
Discovered By Gaim
Fixed In Release 1.0.2

Description

Remote crash. After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of available memory.

Mitigation

Don’t allocate a buffer for file transfers.

We've launched the new site. Think we're missing something?
Read the blog post or Go to the old site