CVE-2005-1261
CVE-2005-1261 is a high-severity vulnerability in Rob Flynn Gaim with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Rob Flynn Gaim
- Published:
- Last modified:
Description
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
Frequently asked questions
- What is CVE-2005-1261?
- Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
- How severe is CVE-2005-1261?
- CVE-2005-1261 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2005-1261 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-1261?
- CVE-2005-1261 primarily affects Rob Flynn Gaim. In total, 48 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-1261?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2005-1261 published?
- CVE-2005-1261 was published on 2005-05-11 and last updated on 2026-06-16.
References
- http://gaim.sourceforge.net/security/index.php?id=16
- http://www.redhat.com/support/errata/RHSA-2005-429.html
- http://www.redhat.com/support/errata/RHSA-2005-432.html
- http://www.securityfocus.com/archive/1/426078/100/0/threaded
- http://www.securityfocus.com/bid/13590
- http://www.vupen.com/english/advisories/2005/0519
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725
Affected products (48)
- cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.76:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.77:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.78:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.79:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.80:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.81:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.82:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:0.82.1:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:rob_flynn:gaim:1.0.2:*:*:*:*:*:*:*
More vulnerabilities in Rob Flynn Gaim
- CVE-2004-0891 — Critical (CVSS 10.0): Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service…
- CVE-2000-1172 — Critical (CVSS 10.0): Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of…
- CVE-2004-0784 — High (CVSS 7.5): The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell…
- CVE-2004-0785 — High (CVSS 7.5): Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute…
- CVE-2004-0754 — High (CVSS 7.5): Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute…
- CVE-2004-0500 — High (CVSS 7.5): Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to…