QIP 2005 suffers from a remote denial of service vulnerability when receiving malformed RTF messages.