Multiple vulnerabilities in Gadu-Gadu

Description

Multiple serious vulnerabilities have been found in Gadu-Gadu. Malicious can use these vulnerabilities to obtain sensitive information or cause denial of service Below is a complete list of vulnerabilities

1. Vectors related to Easycall can be exploited remotely via outgoing calls;
2. A buffer overflow can be exploited remotely via a specially designed image filename;
3. Vectors related to unknown activities can be exploited remotely via a specially designed web page;
4. Vectors related to unknown activities can be exploited remotely via specially designed DCC packets;
5. Improper device name handling can be exploited remotely via a specially designed filename.

Original advisories

Related products

• Gadu-Gadu

CVE list

• CVE-2005-3887
  high
• CVE-2005-3889
  high
• CVE-2005-3888
  high
• CVE-2005-3891
  high
• CVE-2005-3890
  high
• CVE-2005-3892
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com