CVE-2014-3775

Published: May 22, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

Affected (4)

Products: Libgadu: Libgadu

Libgadu

1 product

Libgadu

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Libgadu Libgadu	Up to 1.11.4
Libgadu Libgadu	Version 1.12.0 rc1
Libgadu Libgadu	Version 1.12.0 rc2
Libgadu Libgadu	Version 1.12.0 rc3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001171.html

Source: cve@mitre.org

http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001180.html

Source: cve@mitre.org

http://secunia.com/advisories/58668

Source: cve@mitre.org

http://secunia.com/advisories/58870

Source: cve@mitre.org

http://secunia.com/advisories/58871

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-2935

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/05/19/3

Source: cve@mitre.org

http://www.securityfocus.com/bid/67471

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2215-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2216-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1099776

Source: cve@mitre.org

https://security.gentoo.org/glsa/201508-02

Source: cve@mitre.org

http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001171.html