7.8

CVE-2005-3891

EPSS 2.34%
Veröffentlicht 29.11.2005 21:03:00
Zuletzt bearbeitet 16.06.2026 22:17:49
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the "imgcache\" string that is added to the end of the buffer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gadu-gadu ≫ Gadu-gadu Instant Messenger Version7.20

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.34%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html

Vendor Advisory

http://marc.info/?l=bugtraq&m=113261573023912&w=2

http://secunia.com/advisories/17597/

Patch

Vendor Advisory

http://www.securityfocus.com/bid/15520/

http://www.osvdb.org/21016

https://exchange.xforce.ibmcloud.com/vulnerabilities/23149

https://nvd.nist.gov/vuln/detail/CVE-2005-3891

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3891

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3891

EUVD