CVE-2014-3775 libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute...
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgadu(Debian:12) | < 1:1.12.0~rc3-1 | 1:1.12.0~rc3-1 |
| debian/libgadu(Debian:13) | < 1:1.12.0~rc3-1 | 1:1.12.0~rc3-1 |
| debian/libgadu(Debian:14) | < 1:1.12.0~rc3-1 | 1:1.12.0~rc3-1 |
| libgadu | <= 1.11.4 | No fix listed |
| libgadu | = 1.12.0-rc1 | No fix listed |
| libgadu | = 1.12.0-rc2 | No fix listed |
| libgadu | = 1.12.0-rc3 | No fix listed |
References
- Debian Security Tracker CVE-2014-3775 vendor-advisory
- [libgadu-devel] 20140507 libgadu 1.12.0-rc3 mailing-list
- [libgadu-devel] 20140508 libgadu 1.11.4 mailing-list
- 58668 third-party-advisory
- 58870 third-party-advisory
- 58871 third-party-advisory
- DSA-2935 vendor-advisory
- [oss-security] 20140519 Re: libgadu vulnerability: possible memory corruption mailing-list
- 67471 vdb-entry
- USN-2215-1 vendor-advisory
- USN-2216-1 vendor-advisory
- bugzilla.redhat.com
- GLSA-201508-02 vendor-advisory