CVE-2005-2103
9.8 · CRITICALOverview
CVE-2005-2103 is a critical-severity vulnerability affecting gaim_project gaim. It was published on August 16, 2005 and has a CVSS 3.1 base score of 9.8 (CRITICAL).
This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.
Remediation
Check the references section for vendor advisories and patches from gaim_project. Update gaim to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|---|---|---|
| gaim_project | gaim | >= 0, < 1.5.0 | Affected |
References
Frequently Asked Questions
What is CVE-2005-2103?
CVE-2005-2103 is a critical-severity vulnerability affecting gaim_project gaim. It was published on August 16, 2005 and has a CVSS 3.1 base score of 9.8 (CRITICAL).
How severe is CVE-2005-2103?
This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2005-2103?
Check the references section for vendor advisories and patches from gaim_project. Update gaim to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2005-2103?
CyberStrike's AI-powered security agents can automatically detect CVE-2005-2103 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related CRITICAL CVEs from 2005
View all →Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote ma
CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash
Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back do
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allo
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote a
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowe
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an a
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier a
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary comma
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP serv
admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtai