Gadu-Gadu Multiple Remote Vulnerabilities
BID:11899
Info
Gadu-Gadu Multiple Remote Vulnerabilities
| Bugtraq ID: | 11899 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2004 12:00AM |
| Updated: | Dec 13 2004 12:00AM |
| Credit: | Jaroslaw Sajko <[email protected]> and Blazej Miga <[email protected]> have been credited with the discovery of these issues. |
| Vulnerable: |
Gadu-Gadu Instant Messenger 6.0 build 154 Gadu-Gadu Instant Messenger 6.0 build 153 Gadu-Gadu Instant Messenger 6.0 build 152 Gadu-Gadu Instant Messenger 6.0 build 151 Gadu-Gadu Instant Messenger 6.0 build 150 Gadu-Gadu Instant Messenger 6.0 build 149 Gadu-Gadu Instant Messenger 6.0 |
| Not Vulnerable: | |
Discussion
Gadu-Gadu Multiple Remote Vulnerabilities
Multiple remote vulnerabilities reportedly affect Gadu-Gadu instant messenger.
The first issue reported is a buffer overflow issue, an HTML injection issue, directory traversal vulnerability, multiple heap overflow issues, a remote code execution issue, and integer overflow issue, and an information disclosure vulnerability.
These issues may be exploited to steal potentially sensitive information, execute arbitrary code with the privileges of the affected user, and execute arbitrary script code in the context of an unsuspecting user's browser. Successful exploitation may lead to authentication credential theft and unauthorized access.
Multiple remote vulnerabilities reportedly affect Gadu-Gadu instant messenger.
The first issue reported is a buffer overflow issue, an HTML injection issue, directory traversal vulnerability, multiple heap overflow issues, a remote code execution issue, and integer overflow issue, and an information disclosure vulnerability.
These issues may be exploited to steal potentially sensitive information, execute arbitrary code with the privileges of the affected user, and execute arbitrary script code in the context of an unsuspecting user's browser. Successful exploitation may lead to authentication credential theft and unauthorized access.
Exploit / POC
Gadu-Gadu Multiple Remote Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Gadu-Gadu Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Gadu-Gadu Multiple Remote Vulnerabilities
References:
References:
- Vendor Homepage (Gadu-Gadu)
- Gadu-Gadu several vulnerabilities (Jaroslaw Sajko