| Description: | Description:
The remote host is missing updates announced in
advisory CLA-2005:949.
Gaim is a multi-protocol instant messaging (IM) client.
This announcement fixes three denial of service vulnerabilities that
were encountered in Gaim.
The fixed vulnerabilities are:
CVE-2005-0965: The gaim_markup_strip_html function allows remote
attackers to cause a denial of service (application crash) via a
string that contains malformed HTML, which causes an out-of-bounds
read.
CVE-2005-0966: The IRC protocol plugin allowed (1) remote
attackers to inject arbitrary Gaim markup via irc_msg_kick,
irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to
inject arbitrary Pango markup and pop up empty dialog boxes via
irc_msg_invite, or (3) malicious IRC servers to cause a denial of
service (application crash) by injecting certain Pango markup into
irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan
functions.
CVE-2005-0967: Sending a Gaim Jabber user a certain invalid file
transfer request triggered an out-of-bounds read which caused Gaim to
crash.
For further informations on Gaim's vulnerabilities, please refer to
the project's security page.
Solution:
The apt tool can be used to perform RPM package upgrades
by running 'apt-get update' followed by 'apt-get upgrade'
http://gaim.sourceforge.net/
http://gaim.sourceforge.net/security/
https://secure1.securityspace.com/smysecure/catid.html?in=CLA-2005:949
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000949
Risk factor : High
CVSS Score:
6.4
|
