Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerability

Bugtraq ID:	11158
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 12 2004 12:00AM
Updated:	Sep 12 2004 12:00AM
Credit:	Discovery is credited to Sec-Labs Team <[email protected]>.
Vulnerable:	Gadu-Gadu Instant Messenger 6.0 build 149 Gadu-Gadu Instant Messenger 6.0
Not Vulnerable:

Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerability

Gadu-Gadu is reported prone to a remote heap overflow vulnerability in the image sending feature. This issue results due to insufficient boundary checks performed by the application. Successful exploitation of this vulnerability may allow a remote attacker to execute arbitrary code to gain unauthorized access to a vulnerable computer.

Gadu-Gadu version 6.0 build 149 is reported prone to this issue, however, prior versions are likely to be affected as well.

Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerability

References:

• Vendor Homepage (Gadu-Gadu)
  
• Gadu-Gadu (all versions with image-send feature) Heap Overflow (Sec-Labs Team )