Secunia

Gaim-Encryption contains an input validation error, which can be exploited by malicious users to cause a Denial of Service.

The problem is that the length parameter isn't verified properly when it is negative. This allows malicious persons to overwrite an arbitrary heap position with a null byte.

It might be possible to exploit this to execute arbitrary code, but this has not been proven.

Solution
Version 1.16 and later is not vulnerable.

Provided and/or discovered by
Rapid7

Original Advisory
http://www.rapid7.com/advisories/R7-0013.html

Deep Links
Links available in Customer Area