Description
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.
References
- MDKSA-2005:071 vendor-advisory
- FLSA:158543 vendor-advisory
- oval:org.mitre.oval:def:9185 vdb-entry signature
- 14815 third-party-advisory
- gaim-ircmsginvite-dos(19939) vdb-entry
- 13003 vdb-entry
- http://gaim.sourceforge.net/security/index.php?id=14
- gaim-irc-plugin-bo(19937) vdb-entry
- RHSA-2005:365 vendor-advisory
- 20050401 multiple remote denial of service vulnerabilities in Gaim mailing-list
- http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750
- SUSE-SA:2005:036 vendor-advisory