Vulnerabilities > Gaim Encryption > Gaim Encryption > 1.15

DATE CVE VULNERABILITY TITLE RISK
2003-05-05 CVE-2003-0163 Remote Heap Corruption vulnerability in Gaim-Encryption 1.13/1.14/1.15
decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.
network
low complexity
gaim-encryption
5.0