3 matches found
Cross site request forgery (csrf)
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery CSRF attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol...
CVE-2007-6409
The CVE-2007-6409 entry concerns the gg protocol handler in Gadu-Gadu. When installed but not running, it does not properly handle the skin attribute, allowing remote attackers to cause a denial of service through unspecified network traffic, resulting in resource consumption. The vulnerability a...
Fedora 7 : ekg-1.7-1.fc7 (2007-0791)
Numerous bugfixes including security, support for the latest GG protocol version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...