libgadu libgadu vulnerabilities and exploits

(subscribe to this query)

libgadu prior to 1.11.4 and 1.12.0 prior to 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

Libgadu Libgadu 1.12.0 Libgadu Libgadu

libgadu prior to 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read.

Wojtek Kaniewsk Libgadu 1.7.2 Wojtek Kaniewsk Libgadu 1.7.0 Wojtek Kaniewsk Libgadu Wojtek Kaniewsk Libgadu 1.8.0 Wojtek Kaniewsk Libgadu 1.7.1

libgadu prior to 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers.

Libgadu Libgadu

The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x prior to 2.0.8, when using libgadu 1.0 and later, allows malicious users to cause a denial of service via unknown vectors.

Jabberstudio Jabber Gadu-gadu Transport 2.0.7 Jabberstudio Jabber Gadu-gadu Transport 2.0.5 Jabberstudio Jabber Gadu-gadu Transport 2.0.6 Jabberstudio Jabber Gadu-gadu Transport 2.0.3 Jabberstudio Jabber Gadu-gadu Transport 2.0.4 Jabberstudio Jabber Gadu-gadu Transport 2.0 Jabberstudio Jabber Gadu-gadu Transport 2.0.1 Jabberstudio Jabber Gadu-gadu Transport 2.0.2

Multiple integer signedness errors in libgadu, as used in ekg prior to 1.6rc2 and other packages, may allow remote malicious users to cause a denial of service or execute arbitrary code.

Ekg Ekg 1.1 Ekg Ekg 1.3 Ekg Ekg 2005-06-05 Ekg Ekg 1.6 Rc1 Ekg Ekg 2005-04-11 Ekg Ekg 1.4 Ekg Ekg 1.5

Multiple "memory alignment errors" in libgadu, as used in ekg prior to 1.6rc2, Gaim prior to 1.5.0, and other packages, allows remote malicious users to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.

Ekg Ekg 2005-04-11 Ekg Ekg 2005-06-05 Rob Flynn Gaim Ekg Ekg 1.3 Ekg Ekg 1.4 Ekg Ekg 1.1 Ekg Ekg 1.5 Ekg Ekg 1.6 Rc1

Multiple "endianness errors" in libgadu in ekg prior to 1.6rc2 allow remote malicious users to cause a denial of service (invalid behavior in applications) on big-endian systems.

Ekg Ekg 1.1 Ekg Ekg 1.5 Ekg Ekg 1.6 Rc1 Ekg Ekg 2005-04-11 Ekg Ekg 2005-06-05 Ekg Ekg 1.3 Ekg Ekg 1.4

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook