PT-2005-2816 · Kde+1 · Kopete+1
Marcin ¦Lusarz
·
Publicado
2005-07-21
·
Atualizado
2017-10-11
·
CVE-2005-1852
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kopete versions 3.2.3 through 3.4.1
ekg versions prior to 1.6rc3
GNU Gadu (affected versions not specified)
CenterICQ (affected versions not specified)
Kadu (affected versions not specified)
Description
The issue is caused by multiple integer overflows in libgadu. This can be exploited by remote attackers via an incoming message, potentially leading to a denial of service (crash) and possibly the execution of arbitrary code.
Recommendations
For Kopete versions 3.2.3 through 3.4.1, update to a version outside of this range to resolve the issue.
For ekg versions prior to 1.6rc3, update to version 1.6rc3 or later.
For GNU Gadu, CenterICQ, and Kadu, at the moment, there is no information about a newer version that contains a fix for this issue.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Kopete
Red Hat