high7.5Public exploit code
CVE-2005-1261
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gaim 1.2.1 - URL Handling Remote Stack Overflow2005-05-17 · dos · linux · Verified
Impact
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rob Flynn | Gaim | Versions 0.10, 0.10.3, 0.50, 0.51, 0.52, 0.53 |
References
- NVD record
- CVE.org record
- http://gaim.sourceforge.net/security/index.php?id=16
- http://www.redhat.com/support/errata/RHSA-2005-429.html
- http://www.redhat.com/support/errata/RHSA-2005-432.html
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- http://www.securityfocus.com/bid/13590
- http://www.vupen.com/english/advisories/2005/0519
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725
- http://gaim.sourceforge.net/security/index.php?id=16
- http://www.redhat.com/support/errata/RHSA-2005-429.html
- http://www.redhat.com/support/errata/RHSA-2005-432.html
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- http://www.securityfocus.com/bid/13590
- http://www.vupen.com/english/advisories/2005/0519
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725