Unrated severityNVD Advisory· Published May 5, 2003· Updated Apr 16, 2026
CVE-2003-0163
CVE-2003-0163
Description
decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.
Affected products
3cpe:2.3:a:gaim-encryption:gaim-encryption:1.13:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gaim-encryption:gaim-encryption:1.13:*:*:*:*:*:*:*
- cpe:2.3:a:gaim-encryption:gaim-encryption:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:gaim-encryption:gaim-encryption:1.15:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.rapid7.com/advisories/R7-0013.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/7182nvdPatchVendor Advisory
- marc.infonvd
News mentions
0No linked articles in our index yet.