CVE-2005-1852 : Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1,

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.

Published 2005-07-26 04:00:00

Updated 2017-10-11 01:30:11

Source Debian GNU/Linux

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2005-1852

KDE » KDE » Version: 3.3.1
cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.2.3
cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.3
cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.3.2
cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.4
cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.4.0
cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*
Matching versions
KDE » KDE » Version: 3.4.1
cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.1 Rc2
cpe:2.3:a:ekg:ekg:1.1_rc2:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.3
cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.0 Rc2
cpe:2.3:a:ekg:ekg:1.0_rc2:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.0 Rc3
cpe:2.3:a:ekg:ekg:1.0_rc3:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.5 Rc1
cpe:2.3:a:ekg:ekg:1.5_rc1:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.5 Rc2
cpe:2.3:a:ekg:ekg:1.5_rc2:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.1
cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.1 Rc1
cpe:2.3:a:ekg:ekg:1.1_rc1:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.0
cpe:2.3:a:ekg:ekg:1.0:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.4
cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*
Matching versions
EKG » EKG » Version: 1.5
cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*
Matching versions
Centericq » Centericq
cpe:2.3:a:centericq:centericq:*:*:*:*:*:*:*:*
Matching versions
Kadu » Kadu
cpe:2.3:a:kadu:kadu:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-1852

EPSS FAQ

10.30%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-1852

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2005-1852

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2005-1852

http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml
http://lwn.net/Articles/144724/

Patch;Vendor Advisory
http://marc.info/?l=bugtraq&m=112198499417250&w=2

'Multiple vulnerabilities in libgadu and ekg package' - MARC

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-200507-23.xml

Patch;Vendor Advisory
http://www.kde.org/info/security/advisory-20050721-1.txt

Patch;Vendor Advisory
http://www.novell.com/linux/security/advisories/2005_19_sr.html

Security - Support | SUSE

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532
http://www.redhat.com/support/errata/RHSA-2005-639.html
http://www.securityfocus.com/bid/14345

Patch

Jump to

Vulnerability Details : CVE-2005-1852

Products affected by CVE-2005-1852

Exploit prediction scoring system (EPSS) score for CVE-2005-1852

CVSS scores for CVE-2005-1852

CWE ids for CVE-2005-1852

References for CVE-2005-1852