CVE-2005-3891

Published: Nov 29, 2005Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the "imgcache\" string that is added to the end of the buffer.

Affected (1)

Products: Gadu Gadu: Gadu Gadu Instant Messenger

1 product

Gadu Gadu Instant Messenger

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gadu Gadu Gadu Gadu Instant Messenger	Version 7.20

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html

Source: cve@mitre.org

Vendor Advisory

http://marc.info/?l=bugtraq&m=113261573023912&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17597/

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21016

Source: cve@mitre.org

http://www.securityfocus.com/bid/15520/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23149

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://marc.info/?l=bugtraq&m=113261573023912&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17597/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/21016

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15520/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/23149

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.