Vulnerabilities > CVE-2009-0769 - Resource Management Errors vulnerability in QIP 2005

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
qip
CWE-399
exploit available
NVD
Published: 2009-03-06
Updated: 2018-10-10

Summary

QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\rtf\pict\&&} message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be treated as a vulnerability in QIP.

Vulnerable Configurations

Part Description Count
Application
Qip
1

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionQIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability. CVE-2009-0769. Dos exploits for multiple platform
idEDB-ID:32774
last seen2016-02-03
modified2009-02-04
published2009-02-04
reporterShineShadow
sourcehttps://www.exploit-db.com/download/32774/
titleQIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

References