The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gaim | Rob_flynn | 0.51 (including) | 0.51 (including) |
| Gaim | Rob_flynn | 0.52 (including) | 0.52 (including) |
| Gaim | Rob_flynn | 0.53 (including) | 0.53 (including) |
| Gaim | Rob_flynn | 0.54 (including) | 0.54 (including) |
| Gaim | Rob_flynn | 0.55 (including) | 0.55 (including) |
| Gaim | Rob_flynn | 0.56 (including) | 0.56 (including) |
| Gaim | Rob_flynn | 0.57 (including) | 0.57 (including) |
| Gaim | Rob_flynn | 0.58 (including) | 0.58 (including) |
| Gaim | Rob_flynn | 0.59 (including) | 0.59 (including) |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Linux 7.1 | RedHat | * | |
| Red Hat Linux 7.1 | RedHat | * | |
| Red Hat Linux 7.2 | RedHat | * | |
| Red Hat Linux 7.3 | RedHat | * | |
| Red Hat Powertools 7.0 | RedHat | * |