CVE-2003-0163

decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...

Gaim buffer overflow DoS

Insuficient message length check leads to heap corruption...

Icq 2001&2002 vulnerability

Icq 2001&2002 have feature, that allows to insert graphical smiles. I found, that if you send message filled with lots of smilesicq msg can be about 7000 bytes long, then target icq hangs for 10-20 seconds, consuming all CPU time, or simply crashs. It seems for me that such type of message crashs...

mail.local.diff

688a689,698 define MAXMSGLEN 65536 / Make sure message is less than MAXMSGLEN / if ftellfp MAXMSGLEN syslogLOGDEBUG,"Message too long - %i bytes limit is %i\n", ftellfp,MAXMSGLEN; exit1;...