CVE-2005-3899 The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target's DNS cache and causing a large update file to be se...
MediumCVSS 5.4
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target's DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google talk | All versions | No fix listed |
References
- 20051122 Google Talk Denial of Service - BenjiBug mailing-list vendor-advisory
- 20051123 Google Talk Denial of Service - BenjiBug mailing-list
- googletalk-automatic-update-dos(23180) vdb-entry