249 matches found
CVE-2005-3888
Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped...
CVE-2005-3889
Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads...
CVE-2005-3889
Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads...
CVE-2005-3888
Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped...
CVE-2005-3889
Gadu-Gadu 7.20 is affected by CVE-2005-3889. The vulnerability allows a remote attacker to cause a denial of service by sending multiple DCC packets with a code of 6 or 7, triggering a large number of popup windows and creating many threads. The affected product/version is Gadu-Gadu 7.20. Remedia...
KLA10171 Multiple vulnerabilities in Gadu-Gadu
Multiple serious vulnerabilities have been found in Gadu-Gadu. Malicious can use these vulnerabilities to obtain sensitive information or cause denial of service Below is a complete list of vulnerabilities 1. Vectors related to Easycall can be exploited remotely via outgoing calls; 2. A buffer...
[Full-disclosure] Gadu-Gadu several vulnerabilities (version <= 7.20)
21/11/05 Gadu-Gadu instant messenger several vulnerabilities I. INTRODUCTION During the preparation of the materials about instant messengers security for the security conference we have checked current state of the Gadu-Gadu http://www.gadu-gadu.pl security. There was discovered a several new...
CVE-2002-2173
Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...
EUVD-2002-2152
Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...
CVE-2004-1233
Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service disk consumption via a user packet to the DCC file transfer capability with an invalid file length...
CVE-2004-1231
Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...
CVE-2004-1231
CVE-2004-1231 is a directory traversal vulnerability in Gadu-Gadu, allowing remote attackers to read arbitrary files via ".." sequences in a DCC/CTCP packet (type=1, subtype=4). The NVD entry confirms the vulnerability but provides no patch details in the connected documents. Impact is read acces...
CVE-2004-1230
CVE-2004-1230 pertains to the Gadu-Gadu client. A remote attacker can exploit a DCC connection and a CTCP packet with type=1, subtype=4 to read files from another user’s _cache directory and obtain sensitive information. The vulnerability affects Gadu-Gadu as described in public records; the core...
CVE-2004-1231
Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...
CVE-2004-1230
Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...
woolchat.txt
Hi, I found a bug about WoolChat japanese popular irc client http://www.vector.co.jp/soft/win95/net/se091872.html which allow anyone to kill victim's WoolChat. It has a problem to handle DCC SEND query so if 260 or more bytes file name is specified, it exits immediately with error dialog. DoS...
mIRC DCC Get Dialog File Spoofing Weakness
Binary data 1864.prm...
mIRC < 6.1 DCC Server Protocol Nickname Disclosure
Binary data 1862.prm...
mIRC 6.1 - DCC Get Dialog Denial of Service
source: https://www.securityfocus.com/bid/9492/info A vulnerability has been reported to exist in mIRC that may allow a remote attacker to crash a vulnerable mIRC client. It has been reported that the issue will present itself only in certain circumstances. Although unconfirmed, due to the nature...