Integer overflow in Gaim 0.74 and earlier and Ultramagnetic before 0.81 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.