Login Request a demo
Unscored severity · published Jul 26, 2005
CVE-2005-1852
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Centericq · Centericq
All versions, or not specified · source: NVD
EK
Ekg · Ekg
1.0; 1.0_rc2; 1.0_rc3; 1.1; 1.1_rc1; 1.1_rc2; +5 more · source: NVD
KA
Kadu · Kadu
All versions, or not specified · source: NVD
KD
Kde · Kde
3.2.3; 3.3; 3.3.1; 3.3.2; 3.4; 3.4.0; +1 more · source: NVD
Affected product
CE
Centericq
Centericq
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1852
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1852
Patch
http://lwn.net/Articles/144724/
marc.info
http://marc.info/?l=bugtraq&m=112198499417250&w=2
Vendor Advisory
http://secunia.com/advisories/16140
Vendor Advisory
http://secunia.com/advisories/16155
Vendor Advisory
http://secunia.com/advisories/16211
Vendor Advisory
http://secunia.com/advisories/16242
More from Centericq
–
CVE-2007-0160
Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJournal servers, allows remote attackers to…
–
CVE-2005-3694
centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault and crash) via short zero-length…
–
CVE-2005-1914
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID…