Gadu-gadu
Gadu-gadu Instant Messenger: vulnerabilidades y CVE
Gadu-gadu Instant Messenger tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-6411 | Media (4.3) | 4.1% | — | 17 dic 2007 | Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (gg.exe process crash)… |
| CVE-2007-6409 | Media (4.3) | 0.97% | — | 17 dic 2007 | The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which allows remote attackers to cause a denial of service (resource consumption) via… |
| CVE-2007-6410 | Media (4.3) | 0.43% | — | 17 dic 2007 | Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators… |
| CVE-2005-3891 | Alta (7.8) | 2.3% | — | 29 nov 2005 | Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the "imgcache\" string… |
| CVE-2005-3888 | Alta (7.8) | 2.2% | — | 29 nov 2005 | Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it… |
| CVE-2005-3892 | Media (5) | 1.4% | — | 29 nov 2005 | Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone. |
| CVE-2005-3890 | Alta (7.8) | 2.1% | — | 29 nov 2005 | Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash and configuration loss) via a page with a large number of gg: URIs. |
| CVE-2005-3887 | Media (5.4) | 1.9% | — | 29 nov 2005 | Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1… |
| CVE-2004-1230 | Media (5) | 1.4% | — | 10 ene 2005 | Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype. |
| CVE-2004-1231 | Media (5) | 1.7% | — | 10 ene 2005 | Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype. |
| CVE-2004-1232 | Alta (10) | 6.2% | — | 10 ene 2005 | Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename. |
| CVE-2004-1229 | Alta (7.5) | 1.6% | — | 10 ene 2005 | Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2004-1410. |
| CVE-2004-1233 | Media (5) | 1.6% | — | 10 ene 2005 | Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet to the DCC file transfer capability with an invalid file length. |
| CVE-2004-2529 | Media (5) | 1.6% | — | 31 dic 2004 | Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities. |
| CVE-2004-1410 | Media (4.3) | 1.7% | — | 31 dic 2004 | Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a… |
| CVE-2004-1414 | Media (5) | 1.3% | — | 31 dic 2004 | Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images. |
| CVE-2004-1411 | Baja (2.6) | 1.3% | — | 31 dic 2004 | Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image whose filename does not start with restricted characters. |
| CVE-2004-1676 | Alta (7.5) | 3.3% | — | 12 sept 2004 | Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message. |