CVE-2005-0966: The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject...

Security readout for executives and security teams

This is a legacy Gaim IRC plugin issue from 2005. A crafted IRC event or malicious IRC server could inject markup into the client interface, trigger empty pop-up dialogs, or crash the application. The main business risk is disruption or misleading client UI on machines still running affected Gaim versions. Exposure is likely limited to endpoints still using Gaim 1.2.0 or possibly earlier with the IRC protocol plugin enabled. Modern environments are unlikely to be exposed unless they retain unsupported legacy Linux desktop builds or old packaged clients. Handle as a legacy cleanup item unless affected clients are still in production. The vulnerability is remotely reachable through IRC interactions, but business impact appears client-local and source evidence does not confirm active exploitation. Mitigation focus: Identify and remove unsupported Gaim installations where possible.; Check linked vendor advisories for the correct fixed package or release.; Disable the IRC plugin if continued use is unavoidable..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.