The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target's DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug.
References
Configurations
History
21 Nov 2024, 00:03
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038969.html - Vendor Advisory | |
References | () http://marc.info/?l=bugtraq&m=113278119300162&w=2 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/23180 - |
Information
Published : 2005-11-29 21:03
Updated : 2025-04-03 01:03
NVD link : CVE-2005-3899
Mitre link : CVE-2005-3899
CVE.ORG link : CVE-2005-3899
JSON object : View
Products Affected
- talk
CWE