Denial of Service Vulnerability in Google Talk

CVE-2005-3899

Summary

The automatic update feature in Google Talk is susceptible to a denial of service attack, where remote attackers can exploit DNS cache poisoning to trigger excessive CPU and memory consumption. By manipulating the update process to deliver large update files, attackers can cause a significant performance degradation during the signature verification step. This flaw poses risks to system stability, affecting users' ability to use the application normally.

References