CVE-2005-1261: Buffer Overflow
Published May 11, 2005
·Updated
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
Affected Software
48 affected components
Rob Flynn Gaim=1.1.4
Rob Flynn Gaim=1.0.2
Rob Flynn Gaim=0.81
Rob Flynn Gaim=0.71
Rob Flynn Gaim=0.10.3
Rob Flynn Gaim=0.79
Rob Flynn Gaim=0.61
Rob Flynn Gaim=0.82.1
Rob Flynn Gaim=0.53
Rob Flynn Gaim=0.73
Rob Flynn Gaim=1.1.2
Rob Flynn Gaim=0.60
Rob Flynn Gaim=1.0.1
Rob Flynn Gaim=0.69
Rob Flynn Gaim=0.52
Rob Flynn Gaim=1.1.0
Rob Flynn Gaim=1.2.1
Rob Flynn Gaim=0.72
Rob Flynn Gaim=0.65
Rob Flynn Gaim=0.59
Rob Flynn Gaim=0.62
Rob Flynn Gaim=0.78
Rob Flynn Gaim=0.74
Rob Flynn Gaim=0.76
Rob Flynn Gaim=0.51
Rob Flynn Gaim=0.56
Rob Flynn Gaim=0.54
Rob Flynn Gaim=1.1.3
Rob Flynn Gaim=1.2.0
Rob Flynn Gaim=1.0.3
Rob Flynn Gaim=1.0.0
Rob Flynn Gaim=0.55
Rob Flynn Gaim=0.82
Rob Flynn Gaim=0.68
Rob Flynn Gaim=0.77
Rob Flynn Gaim=0.80
Rob Flynn Gaim=0.67
Rob Flynn Gaim=0.10
Rob Flynn Gaim=0.59.1
Rob Flynn Gaim=1.1.1
Rob Flynn Gaim=0.70
Rob Flynn Gaim=0.50
Rob Flynn Gaim=0.66
Rob Flynn Gaim=0.63
Rob Flynn Gaim=0.64
Rob Flynn Gaim=0.58
Rob Flynn Gaim=0.75
Rob Flynn Gaim=0.57
Remediation
Patch Available
Event History
May 11, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1261?
CVE-2005-1261 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2005-1261?
To fix CVE-2005-1261, users should upgrade to Gaim version 1.3.0 or later, which contains the necessary security patches.
3
Who is affected by CVE-2005-1261?
CVE-2005-1261 affects multiple older versions of Gaim, including versions 0.10 to 1.2.1.
4
What type of vulnerability is CVE-2005-1261?
CVE-2005-1261 is a stack-based buffer overflow vulnerability that occurs in the URL parsing function of Gaim.
5
Can I continue using Gaim if I have CVE-2005-1261?
Continuing to use Gaim with CVE-2005-1261 is risky, as it exposes the application to potential remote code execution.