CVE-2009-0769

MEDIO 4.3CVE-2009-0769 · Published 06/03/2009 · updated 16/06/2026

In breve

CVE-2009-0769 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda qip (qip).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 84.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
qip qip	`= 2005`	No fix yet

Description

QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\rtf\pict\&&} message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be treated as a vulnerability in QIP.

References

secunia.com/advisories/33851 · Vendor Advisory
osvdb.org/51755
securityfocus.com/archive/1/500656/100/0/threaded
securityfocus.com/bid/33609 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free