independent-20041019-00

NOTE: This issue was not reported to a security reporting body.

Summary MSN File transfer DOS (malloc error)
Date 2004-10-19
Discovered By Gaim
Fixed In Release 1.0.2

Description

Remote crash. After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of available memory.

Mitigation

Don’t allocate a buffer for file transfers.

Looking to reach us via XMPP? Check out the new PidginChat service!