CVE-2005-1852
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.70% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- ekg/ekg · kde/kde · centericq/centericq · kadu/kadu
- Source
- security@debian.org
References
- http://lwn.net/Articles/144724/Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=112198499417250&w=2
- http://secunia.com/advisories/16140Vendor Advisory
- http://secunia.com/advisories/16155Vendor Advisory
- http://secunia.com/advisories/16211Vendor Advisory
- http://secunia.com/advisories/16242Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200507-23.xmlPatch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml
- http://www.kde.org/info/security/advisory-20050721-1.txtPatch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-639.html
- http://www.securityfocus.com/bid/14345Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532
- http://lwn.net/Articles/144724/Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=112198499417250&w=2
- http://secunia.com/advisories/16140Vendor Advisory
- http://secunia.com/advisories/16155Vendor Advisory
- http://secunia.com/advisories/16211Vendor Advisory
- http://secunia.com/advisories/16242Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200507-23.xmlPatch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml
- http://www.kde.org/info/security/advisory-20050721-1.txtPatch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-639.html
- http://www.securityfocus.com/bid/14345Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.