CVE-2005-0966: Medium severity Rob Flynn Gaim vulnerability
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via ircmsginvite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into ircmsgbadmode, ircmsgbanned, ircmsgunknown, ircmsgnochan functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0966?
CVE-2005-0966 is considered a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2005-0966?
To fix CVE-2005-0966, upgrade Gaim to version 1.2.1 or later which addresses the vulnerability.
What types of attacks are possible with CVE-2005-0966?
CVE-2005-0966 allows remote attackers to inject arbitrary Gaim and Pango markup leading to various exploits.
Which software versions are affected by CVE-2005-0966?
CVE-2005-0966 affects Gaim version 1.2.0 and possibly earlier versions.
What mitigation strategies can be employed for CVE-2005-0966?
Mitigation strategies for CVE-2005-0966 include avoiding the use of affected versions and applying security updates promptly.