Gaim < 1.2.1 Multiple Vulnerabilities
Medium Nessus Network Monitor Plugin ID 2793
SynopsisThe remote host is vulnerable to multiple attack vectors.
DescriptionThe remote host seems to be running Gaim, a popular open-source multi-protocol instant messenger. It is reported that this version of Gaim is prone to a flaw in the way that it handles malformed HTML data. Specifically, a content-parsing flaw in the 'gaim_markup_strip_html' function can cause the application to fail, leading to a loss of availability. Further, there are reported flaws within the IRC and Jabber plugins that can lead to a remote Denial of Service. In addition, it is reported that a flaw within the IRC plugin can allow the injection of Gaim scripting language commands.
SolutionUpdate to Gaim 1.2.1 or higher.