CVE-2005-3887: Undefined Security Weakness

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to 1 cause a denial of service hang via an image filename of AUX: sent twice hang, or 2 write to the LPT1 port via a filename of "LPT1:"...