libgadu Contact Description Remote Buffer Overflow Vulnerability

Bugtraq ID:	31951
Class:	Boundary Condition Error
CVE:	CVE-2008-4776
Remote:	Yes
Local:	No
Published:	Oct 28 2008 12:00AM
Updated:	Dec 07 2009 11:15PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 libgadu libgadu 1.8.1 ekg ekg 1.7 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	libgadu libgadu 1.8.2

libgadu Contact Description Remote Buffer Overflow Vulnerability

The 'libgadu' library is prone to a remote buffer-overflow vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user into connecting to a malicious Gadu-Gadu server. Successful attacks will allow arbitrary code to run within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to libgadu 1.8.2 are vulnerable. Additional applications that use this library may also be vulnerable.

libgadu Contact Description Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libgadu Contact Description Remote Buffer Overflow Vulnerability

Solution:
The vendor has released an updated version; please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva lib64gadu-devel-1.8.0-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gadu3-1.8.0-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu ekg_1.7~rc2-2ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.7.10.1_powerpc.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.7.10.1_powerpc.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.7.10.1_powerpc.deb

Debian Linux 4.0 arm

• Debian ekg_1.7~rc2-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ arm.deb


• Debian libgadu-dev_1.7~rc2-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_arm.deb


• Debian libgadu3_1.7~rc2-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_arm.deb

Mandriva Linux Mandrake 2008.1

• Mandriva libgadu-devel-1.8.0-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgadu3-1.8.0-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu ekg_1.7~rc2-2ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/e/ekg/ekg_1.7~rc2-2ubuntu0.8.04. 1_powerpc.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu-dev_1.7~rc2-2ubuntu0.8 .04.1_powerpc.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu3_1.7~rc2-2ubuntu0.8.04 .1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libgadu-dev_1.8.0+r592-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu-dev_1.8.0+r592- 1ubuntu0.1_powerpc.deb


• Ubuntu libgadu3-dbg_1.8.0+r592-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3-dbg_1.8.0+r592 -1ubuntu0.1_powerpc.deb


• Ubuntu libgadu3_1.8.0+r592-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3_1.8.0+r592-1ub untu0.1_powerpc.deb

Debian Linux 4.0 powerpc

• Debian ekg_1.7~rc2-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ powerpc.deb


• Debian libgadu-dev_1.7~rc2-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_powerpc.deb


• Debian libgadu3_1.7~rc2-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libgadu-dev_1.8.0+r592-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu-dev_1 .8.0+r592-1ubuntu0.1_i386.deb


• Ubuntu libgadu3-dbg_1.8.0+r592-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu3-dbg_ 1.8.0+r592-1ubuntu0.1_i386.deb


• Ubuntu libgadu3_1.8.0+r592-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu3_1.8. 0+r592-1ubuntu0.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu ekg_1.7~rc2-2ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/e/ekg/ekg_1.7~rc2-2ubuntu0.8.04. 1_sparc.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu-dev_1.7~rc2-2ubuntu0.8 .04.1_sparc.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu3_1.7~rc2-2ubuntu0.8.04 .1_sparc.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva lib64gadu-devel-1.8.1-2.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gadu3-1.8.1-2.1mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu ekg_1.6+20051103-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.6+20051103 -1ubuntu1.1_sparc.deb


• Ubuntu libgadu-dev_1.6+20051103-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.6+2005 1103-1ubuntu1.1_sparc.deb


• Ubuntu libgadu3_1.6+20051103-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.6+2005110 3-1ubuntu1.1_sparc.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva lib64gadu-devel-1.7.1-5.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gadu-static-devel-1.7.1-5.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gadu3-1.7.1-5.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu ekg_1.6+20051103-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.6+20051103 -1ubuntu1.1_powerpc.deb


• Ubuntu libgadu-dev_1.6+20051103-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.6+2005 1103-1ubuntu1.1_powerpc.deb


• Ubuntu libgadu3_1.6+20051103-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.6+2005110 3-1ubuntu1.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu ekg_1.7~rc2-2ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.8.04.1_amd64.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.8.04.1_amd64.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.8.04.1_amd64.deb

MandrakeSoft Enterprise Server 5

• Mandriva libgadu-devel-1.8.1-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgadu3-1.8.1-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva libgadu-devel-1.7.1-5.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgadu-static-devel-1.7.1-5.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgadu3-1.7.1-5.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu ekg_1.7~rc2-2ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.7.10.1_sparc.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.7.10.1_sparc.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.7.10.1_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu ekg_1.7~rc2-2ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/e/ekg/ekg_1.7~rc2-2ubuntu0.8.04. 1_lpia.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu-dev_1.7~rc2-2ubuntu0.8 .04.1_lpia.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu3_1.7~rc2-2ubuntu0.8.04 .1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu ekg_1.6+20051103-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.6+20051103 -1ubuntu1.1_i386.deb


• Ubuntu libgadu-dev_1.6+20051103-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.6+2005 1103-1ubuntu1.1_i386.deb


• Ubuntu libgadu3_1.6+20051103-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.6+2005110 3-1ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu ekg_1.7~rc2-2ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/e/ekg/ekg_1.7~rc2-2ubuntu0.7.10. 1_lpia.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu-dev_1.7~rc2-2ubuntu0.7 .10.1_lpia.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/ekg/libgadu3_1.7~rc2-2ubuntu0.7.10 .1_lpia.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu libgadu-dev_1.8.0+r592-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu-dev_1.8.0+r592- 1ubuntu0.1_lpia.deb


• Ubuntu libgadu3-dbg_1.8.0+r592-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3-dbg_1.8.0+r592 -1ubuntu0.1_lpia.deb


• Ubuntu libgadu3_1.8.0+r592-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3_1.8.0+r592-1ub untu0.1_lpia.deb

Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu ekg_1.7~rc2-2ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.7.10.1_i386.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.7.10.1_i386.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.7.10.1_i386.deb

Debian Linux 4.0 amd64

• Debian ekg_1.7~rc2-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ amd64.deb


• Debian libgadu-dev_1.7~rc2-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_amd64.deb


• Debian libgadu3_1.7~rc2-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu ekg_1.6+20051103-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.6+20051103 -1ubuntu1.1_amd64.deb


• Ubuntu libgadu-dev_1.6+20051103-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.6+2005 1103-1ubuntu1.1_amd64.deb


• Ubuntu libgadu3_1.6+20051103-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.6+2005110 3-1ubuntu1.1_amd64.deb

Debian Linux 4.0 ia-32

• Debian ekg_1.7~rc2-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ i386.deb


• Debian libgadu-dev_1.7~rc2-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_i386.deb


• Debian libgadu3_1.7~rc2-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_i386.deb

Debian Linux 4.0 hppa

• Debian ekg_1.7~rc2-1etch2_hppa.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ hppa.deb


• Debian libgadu-dev_1.7~rc2-1etch2_hppa.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_hppa.deb


• Debian libgadu3_1.7~rc2-1etch2_hppa.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_hppa.deb

Debian Linux 4.0 sparc

• Debian ekg_1.7~rc2-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ sparc.deb


• Debian libgadu-dev_1.7~rc2-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_sparc.deb


• Debian libgadu3_1.7~rc2-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_sparc.deb

Debian Linux 4.0 s/390

• Debian ekg_1.7~rc2-1etch2_s390.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ s390.deb


• Debian libgadu-dev_1.7~rc2-1etch2_s390.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_s390.deb


• Debian libgadu3_1.7~rc2-1etch2_s390.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_s390.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libgadu-dev_1.8.0+r592-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu-dev_1.8.0+r592- 1ubuntu0.1_sparc.deb


• Ubuntu libgadu3-dbg_1.8.0+r592-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3-dbg_1.8.0+r592 -1ubuntu0.1_sparc.deb


• Ubuntu libgadu3_1.8.0+r592-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libg/libgadu/libgadu3_1.8.0+r592-1ub untu0.1_sparc.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libgadu-devel-1.8.1-2.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgadu3-1.8.1-2.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 alpha

• Debian ekg_1.7~rc2-1etch2_alpha.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ alpha.deb


• Debian libgadu-dev_1.7~rc2-1etch2_alpha.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_alpha.deb


• Debian libgadu3_1.7~rc2-1etch2_alpha.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_alpha.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu ekg_1.7~rc2-2ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.7.10.1_amd64.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.7.10.1_amd64.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.7.10.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu ekg_1.7~rc2-2ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.7~rc2-2ubu ntu0.8.04.1_i386.deb


• Ubuntu libgadu-dev_1.7~rc2-2ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.7~rc2- 2ubuntu0.8.04.1_i386.deb


• Ubuntu libgadu3_1.7~rc2-2ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.7~rc2-2ub untu0.8.04.1_i386.deb

Debian Linux 4.0 mipsel

• Debian ekg_1.7~rc2-1etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ mipsel.deb


• Debian libgadu-dev_1.7~rc2-1etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_mipsel.deb


• Debian libgadu3_1.7~rc2-1etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_mipsel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64gadu-devel-1.8.1-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gadu3-1.8.1-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu libgadu-dev_1.8.0+r592-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu-dev_1 .8.0+r592-1ubuntu0.1_amd64.deb


• Ubuntu libgadu3-dbg_1.8.0+r592-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu3-dbg_ 1.8.0+r592-1ubuntu0.1_amd64.deb


• Ubuntu libgadu3_1.8.0+r592-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgadu/libgadu3_1.8. 0+r592-1ubuntu0.1_amd64.deb

Debian Linux 4.0 ia-64

• Debian ekg_1.7~rc2-1etch2_ia64.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ ia64.deb


• Debian libgadu-dev_1.7~rc2-1etch2_ia64.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_ia64.deb


• Debian libgadu3_1.7~rc2-1etch2_ia64.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_ia64.deb

Debian Linux 4.0 mips

• Debian ekg_1.7~rc2-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/e/ekg/ekg_1.7~rc2-1etch2_ mips.deb


• Debian libgadu-dev_1.7~rc2-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu-dev_1.7~rc2 -1etch2_mips.deb


• Debian libgadu3_1.7~rc2-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/e/ekg/libgadu3_1.7~rc2-1e tch2_mips.deb

libgadu libgadu 1.8.1

• libgadu libgadu-1.8.2.tar.gz
  http://toxygen.net/libgadu/files/libgadu-1.8.2.tar.gz

libgadu Contact Description Remote Buffer Overflow Vulnerability

References:

• libgadu 1.8.2 Release Notes (libgadu)
  
• libgadu Homepage (libgadu)
  
• libgadu: contact description buffer overrun vulnerability (Tomas Hoger)