QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

Bugtraq ID:	33609
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 04 2009 12:00AM
Updated:	Feb 06 2009 08:18PM
Credit:	Maxim Kulakov (aka ShineShadow)
Vulnerable:	QIP QIP 2005 build 8082
Not Vulnerable:

QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

QIP 2005 is prone to a remote denial-of-service vulnerability.

Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources, denying service to legitimate users.

NOTE: This issue may occur in a third-party component used by QIP 2005, but this has not been confirmed.

This issue affects QIP 2005 build 8082; other versions may also be vulnerable.

QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

Attackers can exploit the issue using readily available network tools.

The following exploit message text is available:

• /data/vulnerabilities/exploits/33609.txt

QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

References:

• QIP Homepage (QIP)
  
• QIP 2005 Denial of Service Vulnerability ([email protected])