Description
The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.
References
- MDKSA-2005:071 vendor-advisory
- FLSA:158543 vendor-advisory
- oval:org.mitre.oval:def:11292 vdb-entry signature
- 14815 third-party-advisory
- 12999 vdb-entry
- RHSA-2005:365 vendor-advisory
- 20050401 multiple remote denial of service vulnerabilities in Gaim mailing-list
- http://gaim.sourceforge.net/security/index.php?id=13
- SUSE-SA:2005:036 vendor-advisory