Lucene search
HistoryOct 25, 2005 - 4:00 a.m.
CVE-2004-2530
cve-2004-2530
gadu-gadu
visual truncation
remote attackers
file extension spoofing
security vulnerability
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.044 Low
EPSS
Percentile
92.5%
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.
Affected configurations
Node
gadu-gadugadu-gadu_instant_messenger
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.044 Low
EPSS
Percentile
92.5%
Related for CVE-2004-2530