CVE-2003-0163

2003-04-1504:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.