Lucene search
HistoryNov 29, 2005 - 9:03 p.m.
CVE-2005-3887
5.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1 port via a filename of “LPT1:”.
Affected configurations
Node
gadu-gadugadu-gadu_instant_messengerMatch7.20
Related
cve
cve
CVE-2005-3887
2005-11-29 21:03:00
cvelist
cvelist
CVE-2005-3887
2005-11-29 21:00:00
kaspersky
kaspersky
KLA10171 Multiple vulnerabilities in Gadu-Gadu
2005-11-29 00:00:00
5.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
Related for NVD:CVE-2005-3887