CVE-2005-3899: Google Talk

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target's DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug.

Affected products

• Google Talk: any version

Published 2005-11-29. Last modified 2026-06-16.