CVE-2003-0163 | BDVDB-2026-5370 Detail

Description#

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.rapid7.com/advisories/R7-0013.html
http://marc.info/?l=bugtraq&m=105013281120352&w=2
http://www.securityfocus.com/bid/7182

Exploit#

No public exploit known

History#

Version 12003-04-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.