PT-2005-2816 · Kde+1 · Kopete+1

Marcin ¦Lusarz · Published 2005-07-21 · Updated 2017-10-11 · CVE-2005-1852

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kopete versions 3.2.3 through 3.4.1 ekg versions prior to 1.6rc3 GNU Gadu (affected versions not specified) CenterICQ (affected versions not specified) Kadu (affected versions not specified)

Description The issue is caused by multiple integer overflows in libgadu. This can be exploited by remote attackers via an incoming message, potentially leading to a denial of service (crash) and possibly the execution of arbitrary code.

Recommendations For Kopete versions 3.2.3 through 3.4.1, update to a version outside of this range to resolve the issue. For ekg versions prior to 1.6rc3, update to version 1.6rc3 or later. For GNU Gadu, CenterICQ, and Kadu, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2005-1852

DSA-767-1

DTSA-4-1

RHSA-2005:639

RHSA-2005_639

Affected Products

Kopete

Red Hat

References · 21

• http://securityfocus.com/bid/14345 · Patch
• http://secunia.com/advisories/16242 · Vendor Advisory
• http://lwn.net/Articles/144724 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03133 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200507-26.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1852 · Security Note
• https://bdu.fstec.ru/vul/2015-03132 · Security Note
• http://security.gentoo.org/glsa/glsa-200507-23.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-639.html · Vendor Advisory
• http://secunia.com/advisories/16155 · Vendor Advisory
• http://secunia.com/advisories/16140 · Vendor Advisory
• http://secunia.com/advisories/16211 · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_19_sr.html · Vendor Advisory
• http://kde.org/info/security/advisory-20050721-1.txt · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532 · Note