CVE-2014-3775

CVE-2014-3775 affects libgadu:1)11.4 and 1.12.0 before 1.12.0-rc3, used in Pidgin and other products. A crafted Gadu-Gadu message from a remote server can trigger a memory overwrite, causing DoS or possibly arbitrary code execution. Impact reported by multiple sources (e.g., OpenVAS/OpenBSD/GLSA ...

CVE-2013-4488

CVE-2013-4488 affects libgadu prior to 1.12.0, where the library does not verify X.509 certificates from SSL servers, enabling MITM spoofing of servers. This is documented across multiple connected sources (OSV/NVD/NASL-derived advisories and Gentoo GLSA). Impact described as remote spoofing of s...