Gadu-Gadu Multiple Remote Vulnerabilities
BID:15520
CVE-2005-3887 | CVE-2005-3888 | CVE-2005-3889 | CVE-2005-3890 | CVE-2005-3891 | CVE-2005-3892 |Info
Gadu-Gadu Multiple Remote Vulnerabilities
| Bugtraq ID: | 15520 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2005 12:00AM |
| Updated: | Nov 21 2005 12:00AM |
| Credit: | Jaroslaw Sajko and Blazej Miga are credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Gadu-Gadu Instant Messenger 7.2 |
| Not Vulnerable: | |
Discussion
Gadu-Gadu Multiple Remote Vulnerabilities
Gadu-Gadu is prone to multiple remote vulnerabilities.
The application is prone to multiple denial of service vulnerabilities. A buffer overflow vulnerability that could permit the execution of arbitrary code. The application is also prone to a vulnerability that could permit an attacker to eavesdrop on a victim user through the microphone.
Successful exploitation of the majority of these issues will result in a crash of the application, denying service to legitimate users.
Gadu-Gadu is prone to multiple remote vulnerabilities.
The application is prone to multiple denial of service vulnerabilities. A buffer overflow vulnerability that could permit the execution of arbitrary code. The application is also prone to a vulnerability that could permit an attacker to eavesdrop on a victim user through the microphone.
Successful exploitation of the majority of these issues will result in a crash of the application, denying service to legitimate users.
Exploit / POC
Gadu-Gadu Multiple Remote Vulnerabilities
The majority of these issues do not require complex exploitation techniques. However, exploitation of the buffer overflow vulnerability is reported to be difficult, and no exploit code is currently known to exist for that vulnerability. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
The majority of these issues do not require complex exploitation techniques. However, exploitation of the buffer overflow vulnerability is reported to be difficult, and no exploit code is currently known to exist for that vulnerability. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Gadu-Gadu Multiple Remote Vulnerabilities
Solution:
Reports indicate the vendor has addressed these issues in the latest release of the application. This has not been confirmed. Users are advised to contact the vendor for further information.
--
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Reports indicate the vendor has addressed these issues in the latest release of the application. This has not been confirmed. Users are advised to contact the vendor for further information.
--
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Gadu-Gadu Multiple Remote Vulnerabilities
References:
References:
- Vendor Homepage (Gadu-Gadu)
- Gadu-Gadu several vulnerabilities (version <= 7.20) (Jaroslaw Sajko