CVE-2004-0784
Status: ModifiedHigh (7.5)—
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.34%
- Percentile among all scored CVEs: 83
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-Other
References
- http://gaim.sourceforge.net/security/?id=1
- http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
- http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
- http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
- http://www.redhat.com/support/errata/RHSA-2004-400.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
- http://gaim.sourceforge.net/security/?id=1
- http://www.fedoranews.org/updates/FEDORA-2004-278.shtml
- http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
- http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml
- http://www.redhat.com/support/errata/RHSA-2004-400.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
Raw JSON (NVD)
Show
{
"id": "CVE-2004-0784",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-10-20T04:00:00.000",
"references": [
{
"url": "http://gaim.sourceforge.net/security/?id=1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2004-400.html",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008",
"source": "cve@mitre.org"
},
{
"url": "http://gaim.sourceforge.net/security/?id=1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2004-400.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector."
},
{
"lang": "es",
"value": "La funcionalidad de temas de iconos gestuales (smileys) de Gaim anteriores a 0.82 permite a atacantes remotos ejecutar comandos de su elección mediante metacaractéres de shell en el nombre del fichero o del fichero tar que es arrastrado al selector del icono."
}
],
"lastModified": "2026-06-16T22:06:21.977",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D1EE775-471F-4D9F-9635-41CB581168D7"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E56639E-2F96-4110-8846-0EA887D2967B"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2FDCAE1-0B5D-449F-A83A-5028E7701109"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E955A141-DAEB-40EA-BE35-A5EED928E030"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E94CDB8A-7120-41C6-95AF-5DBAD74F3204"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA529226-9252-41EE-8543-692F3119CF6D"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30E40E9A-950B-4D6E-A748-5F76F7B97AEB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4FF2E49-7561-461A-98BD-4778C6764020"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4168D220-61A9-4E9F-A5A8-4832822E35EF"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "253631B3-8A0C-48DC-851A-F5A6AB490BCB"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1266BD64-E19D-4686-9E00-42CC9AF94756"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C62BCA03-A187-432B-B2B3-40DE99A9986C"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92762951-6F9E-426D-8157-55C65A561417"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A4B3DA2-9ECB-454D-8775-9571B158007F"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A041E262-E36F-44C3-B83B-2E79653B74EE"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "333D0BA1-7676-417D-BB92-AAA1AAED2D0A"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF449EC2-A6F2-405F-BEE7-0516E092E6F3"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "840C5668-D951-4A62-B555-EB3D91A08B61"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC715625-C4E7-49AC-9F3E-7306114878D4"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8834643-F682-4FC1-93DE-BE4754E993AD"
},
{
"criteria": "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}