The IRC protocol plugin in Gaim 1.2.0, and possibly earlier...
Vulnerability Description
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0966
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:071
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185
- http://secunia.com/advisories/14815
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19939
- http://www.securityfocus.com/bid/13003
- http://gaim.sourceforge.net/security/index.php?id=14
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19937
- http://www.redhat.com/support/errata/RHSA-2005-365.html
- http://marc.info/?l=bugtraq&m=111238715307356&w=2
- http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html
More from rob flynn
View All →Affected Vendor
rob flynn
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.