CVE-2005-0473: Medium severity Rob Flynn Gaim vulnerability
Published Feb 19, 2005
·Updated
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.
Affected Software
14 affected components
Rob Flynn Gaim=1.1.2
Rob Flynn Gaim=1.0
Rob Flynn Gaim=1.0.1
Rob Flynn Gaim=1.1.1
redhat Enterprise Linux=4.0
redhat Enterprise Linux=4.0
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux Corporate Server=3.0
Mandrakesoft Mandrake Linux Corporate Server=3.0
redhat Enterprise Linux=4.0
Mandrakesoft Mandrake Linux=10.0
redhat Enterprise Linux Desktop=4.0
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.1
Remediation
Patch Available
Patch Available
Event History
Feb 19, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0473?
CVE-2005-0473 is classified as a denial of service vulnerability, allowing attackers to crash the application.
2
How do I fix CVE-2005-0473?
To resolve CVE-2005-0473, upgrade Gaim to version 1.1.3 or later, which addresses this vulnerability.
3
What software versions are affected by CVE-2005-0473?
CVE-2005-0473 affects Gaim versions 1.0, 1.0.1, 1.1.1, and 1.1.2.
4
Can CVE-2005-0473 be exploited remotely?
Yes, CVE-2005-0473 can be exploited remotely through the use of malformed HTML.
5
What type of attack does CVE-2005-0473 facilitate?
CVE-2005-0473 facilitates a denial of service attack by causing invalid memory access and crashing the application.