CVE Vulnerabilities

CVE-2003-0163

Published: May 05, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

Affected Software

Name Vendor Start Version End Version
Gaim-encryption Gaim-encryption 1.13 1.13
Gaim-encryption Gaim-encryption 1.14 1.14
Gaim-encryption Gaim-encryption 1.15 1.15

References