Gadu-Gadu Emots.TXT Handler Multiple Remote Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	26545
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 22 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	j00ru//vx is credited with the discovery of these vulnerabilities.
Vulnerable:	Gadu-Gadu Gadu-Gadu 7.7
Not Vulnerable:

Gadu-Gadu Emots.TXT Handler Multiple Remote Stack Buffer Overflow Vulnerabilities

Gadu-Gadu is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit these issues by enticing an unsuspecting user to load a specially crafted emote configuration file.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

Gadu-Gadu 7.7 build 3669 is vulnerable; other versions may also be affected.

Gadu-Gadu Emots.TXT Handler Multiple Remote Stack Buffer Overflow Vulnerabilities

Proof-of-concept code has been developed to leverage one of these issues, but reports indicate that it will not be released to the public.

Gadu-Gadu Emots.TXT Handler Multiple Remote Stack Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gadu-Gadu Emots.TXT Handler Multiple Remote Stack Buffer Overflow Vulnerabilities

References:

• Vendor Homepage (Gadu-Gadu)
  
• [ELEYTT] Public Advisory 05-12-2007 ("Michal Bucko" )
  
• Gadu-Gadu Local/Remote Buffer Overflow vulnerability ([email protected])