hugo/content/about/security/advisories/cve-2005-0965-00.md@cf811d26020d
hugo/content/about/security/advisories/cve-2005-0965-00.md
Thu, 02 Jan 2025 16:35:59 -0600
- author
- Gary Kramlich <grim@reaperworld.com>
- date
- Thu, 02 Jan 2025 16:35:59 -0600
- changeset 545
- cf811d26020d
- parent 394
- c83367e9b2db
- permissions
- -rw-r--r--
Add a flathub verification token
Testing Done:
Ran with `npm run hugo:server` and verified the file was served properly.
Reviewed at https://reviews.imfreedom.org/r/3718/
--- title: cve-2005-0965-00 date: 2005-04-02T00:00:00.000Z cveNumber: cve-2005-0965 summary: Remote DoS on receiving malformed HTML discoveredBy: Jean-Yves Lefort fixedInRelease: 1.2.1 type: security layout: cve hidden: true --- ### Description The `gaim_markup_strip_html` function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read. ### Mitigation The function was changed to not allow the out-of-bounds read.
