Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade centericqUpgrade ru-gaimUpgrade kdenetworkUpgrade pl-ekgUpgrade ko-gaimUpgrade gaimUpgrade ja-gaim | Dec 10, 2025 | Aug 12, 2005 |
| Gentoo Linux | — | Upgrade kde-base/kopete.Upgrade net-im/centericq.Upgrade kde-base/kdenetwork.Upgrade net-im/gnugadu.Upgrade net-im/ekg.Upgrade net-im/kadu.Upgrade net-libs/libgadu. | Oct 30, 2017 | Jul 26, 2005 |
| Ubuntu | — | Upgrade ekg | Nov 8, 2024 | Jul 26, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub