CVE-2003-0163

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause…

published April 15, 2003

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.5th percentile
Published
2003-04-15T04:00Z
EPSS history
Timeline
  • 15 APR 04:00Z
    decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause…
    cvelistv5