CVE-2003-0163

MEDIUM 5.0CVE-2003-0163 · Published 05/05/2003 · updated 16/06/2026

In short

CVE-2003-0163 is a MEDIUM (CVSS 5.0) vulnerability affecting gaim-encryption (gaim-encryption).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gaim-encryption gaim-encryption	`= 1.13= 1.14= 1.15`	No fix yet

Description

decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.

References

marc.info
rapid7.com/advisories/R7-0013.html · Patch
securityfocus.com/bid/7182 · Patch

More vulnerabilities in gaim-encryption

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free