A malicious server or man-in-the-middle could send a large value for Content-Length and cause an integer overflow which could lead to a buffer overflow in Gadu-Gadu HTTP parsing (CVE-2013-6487).
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 3 | noarch | libgadu | < 1.11.3-1 | libgadu-1.11.3-1.mga3 |
Mageia | 4 | noarch | libgadu | < 1.11.3-1 | libgadu-1.11.3-1.mga4 |