Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Gaim < 1.2.1 Multiple Vulnerabilities

Medium

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host seems to be running Gaim, a popular open-source multi-protocol instant messenger. It is reported that this version of Gaim is prone to a flaw in the way that it handles malformed HTML data. Specifically, a content-parsing flaw in the 'gaim_markup_strip_html' function can cause the application to fail, leading to a loss of availability. Further, there are reported flaws within the IRC and Jabber plugins that can lead to a remote Denial of Service. In addition, it is reported that a flaw within the IRC plugin can allow the injection of Gaim scripting language commands.

Solution

Update to Gaim 1.2.1 or higher.