Improper input validation in Google Talk

CVE-2005-3678

Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (53.9th percentile) — read the EPSS interpretation.

Affected products

  • Google Talk — versions 1.0.0.66, 1.0.0.67, 1.0.0.68
  • N/a — versions n/a

Weakness classification (CWE)

References