← Database

CVE-2003-0163

MEDIUM CVSS: 5.0 Published: 2003-05-05 Modified: 2026-06-16

Description

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

Affected Platforms

Gaim-Encryption Gaim-Encryption

Weakness Type

NVD-CWE-Other

References