Gadu-gadu
Gadu-gadu Instant Messenger: vulnerabilities and CVEs
Gadu-gadu Instant Messenger has 18 published vulnerabilities, 0 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs18
Last 12 months0
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-6411 | Medium (4.3) | 4.1% | — | Dec 17, 2007 | Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (gg.exe process crash)… |
| CVE-2007-6409 | Medium (4.3) | 0.97% | — | Dec 17, 2007 | The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which allows remote attackers to cause a denial of service (resource consumption) via… |
| CVE-2007-6410 | Medium (4.3) | 0.43% | — | Dec 17, 2007 | Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators… |
| CVE-2005-3891 | High (7.8) | 2.3% | — | Nov 29, 2005 | Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the "imgcache\" string… |
| CVE-2005-3888 | High (7.8) | 2.2% | — | Nov 29, 2005 | Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it… |
| CVE-2005-3892 | Medium (5) | 1.4% | — | Nov 29, 2005 | Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone. |
| CVE-2005-3890 | High (7.8) | 2.1% | — | Nov 29, 2005 | Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash and configuration loss) via a page with a large number of gg: URIs. |
| CVE-2005-3887 | Medium (5.4) | 1.9% | — | Nov 29, 2005 | Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1… |
| CVE-2004-1230 | Medium (5) | 1.4% | — | Jan 10, 2005 | Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype. |
| CVE-2004-1231 | Medium (5) | 1.7% | — | Jan 10, 2005 | Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype. |
| CVE-2004-1232 | High (10) | 6.2% | — | Jan 10, 2005 | Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename. |
| CVE-2004-1229 | High (7.5) | 1.6% | — | Jan 10, 2005 | Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2004-1410. |
| CVE-2004-1233 | Medium (5) | 1.6% | — | Jan 10, 2005 | Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet to the DCC file transfer capability with an invalid file length. |
| CVE-2004-2529 | Medium (5) | 1.6% | — | Dec 31, 2004 | Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities. |
| CVE-2004-1410 | Medium (4.3) | 1.7% | — | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a… |
| CVE-2004-1414 | Medium (5) | 1.3% | — | Dec 31, 2004 | Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images. |
| CVE-2004-1411 | Low (2.6) | 1.3% | — | Dec 31, 2004 | Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image whose filename does not start with restricted characters. |
| CVE-2004-1676 | High (7.5) | 3.3% | — | Sep 12, 2004 | Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message. |