CVE-2009-0769 QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\rtf\pict&&} me...
MediumCVSS 4.3
EPSS 2.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\rtf\pict&&} message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be treated as a vulnerability in QIP.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qip | = 2005 | No fix listed |
References
- 33851 third-party-advisory vendor-advisory
- 51755 vdb-entry
- 20090204 QIP 2005 Denial of Service Vulnerability mailing-list
- 33609 exploit vdb-entry