CVE-2004-0784: The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands vi...

Security readout for executives and security teams

CVE-2004-0784 is a legacy Gaim issue where a crafted smiley theme archive filename could cause commands to run when dragged into the smiley selector. Business exposure is mainly old desktop clients, not modern server infrastructure. No source in the bundle shows active exploitation. Organizations are likely exposed only if they still have Gaim versions before 0.82, or old Linux distribution packages referenced by Fedora, Gentoo, or Red Hat advisories. This is a legacy endpoint application exposure. Treat as a moderate legacy cleanup item unless asset inventory shows active pre-0.82 Gaim use. Prioritize removal or update on managed desktops because command execution is possible, but exposure depends on old software and user interaction. Mitigation focus: Upgrade Gaim to version 0.82 or later where present.; Apply relevant Fedora, Gentoo, or Red Hat advisory updates.; Remove unsupported Gaim installations from managed endpoints..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.