RedHatRHSA-2005:215(RHSA-2005:215) gaim security update
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.085 Low
EPSS
Percentile
93.8%
The Gaim application is a multi-protocol instant messaging client.
Two HTML parsing bugs were discovered in Gaim. It is possible that a remote
attacker could send a specially crafted message to a Gaim client, causing
it to crash. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the names CAN-2005-0208 and CAN-2005-0473 to
these issues.
A bug in the way Gaim processes SNAC packets was discovered. It is
possible that a remote attacker could send a specially crafted SNAC packet
to a Gaim client, causing the client to stop responding. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0472 to this issue.
Additionally, various client crashes, memory leaks, and protocol issues
have been resolved.
Users of Gaim are advised to upgrade to this updated package which contains
Gaim version 1.1.4 and is not vulnerable to these issues.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | i386 | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.i386.rpm |
| RedHat | any | s390x | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.s390x.rpm |
| RedHat | any | ppc | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.ppc.rpm |
| RedHat | any | s390 | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.s390.rpm |
| RedHat | any | ia64 | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.ia64.rpm |
| RedHat | any | src | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.src.rpm |
| RedHat | any | x86_64 | gaim | < 1.1.4-1.EL4 | gaim-1.1.4-1.EL4.x86_64.rpm |
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.085 Low
EPSS
Percentile
93.8%