EUVD-2005-3882

Malware in sbrugna...

EUVD-2004-1411

Malware in sbrugna...

EUVD-2004-1408

Malware in sbrugna...

EUVD-2005-3885

Malware in sbrugna...

EUVD-2004-1670

Malware in sbrugna...

CVE-2004-1414

Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service application hang via a message that contains many special strings that are converted to images...

CVE-2004-1229

Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via 1 http:// or 2 news:// URLs, a different vulnerability than CVE-2004-1410...

CVE-2004-1232

Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename...

CVE-2004-1231

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-2530

Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box...

CVE-2004-1411

Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service infinite loop via a message that contains an image whose filename does not start with restricted characters...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1229

Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via 1 http:// or 2 news:// URLs, a different vulnerability than CVE-2004-1410...

[Full-Disclosure] Gadu-Gadu (all versions with image-send feature) Heap Overflow

Sec-Labs Team proudly presents: Gadu-Gadu all versions with image-send feature Heap Overflow by Lord YuP 12/09/2004 Severity: High / Critical - Remote Code Execution Version affected: Probably all versions with image-send feature Tested on ver. 6.0 build 149 the newest one released two days befor...