CVE-2004-0784
Estado: ModificadaAlta (7.5)—
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.34%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://gaim.sourceforge.net/security/?id=1
- http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
- http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
- http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
- http://www.redhat.com/support/errata/RHSA-2004-400.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
- http://gaim.sourceforge.net/security/?id=1
- http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
- http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
- http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
- http://www.redhat.com/support/errata/RHSA-2004-400.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-0784",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-10-20T04:00:00.000",
"references": [
{
"url": "http://gaim.sourceforge.net/security/?id=1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2004-400.html",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008",
"source": "cve@mitre.org"
},
{
"url": "http://gaim.sourceforge.net/security/?id=1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2004-400.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector."
},
{
"lang": "es",
"value": "La funcionalidad de temas de iconos gestuales (smileys) de Gaim anteriores a 0.82 permite a atacantes remotos ejecutar comandos de su elección mediante metacaractéres de shell en el nombre del fichero o del fichero tar que es arrastrado al selector del icono."
}
],
"lastModified": "2026-06-16T22:06:21.977",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D1EE775-471F-4D9F-9635-41CB581168D7"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E56639E-2F96-4110-8846-0EA887D2967B"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2FDCAE1-0B5D-449F-A83A-5028E7701109"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E955A141-DAEB-40EA-BE35-A5EED928E030"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E94CDB8A-7120-41C6-95AF-5DBAD74F3204"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA529226-9252-41EE-8543-692F3119CF6D"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30E40E9A-950B-4D6E-A748-5F76F7B97AEB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4FF2E49-7561-461A-98BD-4778C6764020"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4168D220-61A9-4E9F-A5A8-4832822E35EF"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "253631B3-8A0C-48DC-851A-F5A6AB490BCB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1266BD64-E19D-4686-9E00-42CC9AF94756"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C62BCA03-A187-432B-B2B3-40DE99A9986C"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92762951-6F9E-426D-8157-55C65A561417"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A4B3DA2-9ECB-454D-8775-9571B158007F"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A041E262-E36F-44C3-B83B-2E79653B74EE"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333D0BA1-7676-417D-BB92-AAA1AAED2D0A"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF449EC2-A6F2-405F-BEE7-0516E092E6F3"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "840C5668-D951-4A62-B555-EB3D91A08B61"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC715625-C4E7-49AC-9F3E-7306114878D4"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8834643-F682-4FC1-93DE-BE4754E993AD"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}