SynopsisThe remote host is vulnerable to multiple attack vectors.
DescriptionThe remote host seems to be running Gaim, a popular open-source multi-protocol instant messenger. It is reported that this version of Gaim is prone to a flaw in the way that it handles malformed HTML data. Specifically, a content-parsing flaw in the 'gaim_markup_strip_html' function can cause the application to fail, leading to a loss of availability. Further, there are reported flaws within the IRC and Jabber plugins that can lead to a remote Denial of Service. In addition, it is reported that a flaw within the IRC plugin can allow the injection of Gaim scripting language commands.
SolutionUpdate to Gaim 1.2.1 or higher.
Temporal Vector: CVSS2#E:U/RL:OF/RC:C
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C