{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-21T00:00:00", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the \"imgcache\\\" string that is added to the end of the buffer."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "15520", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15520/"}, {"name": "21016", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21016"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=113261573023912&w=2"}, {"name": "17597", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17597/"}, {"name": "gadu-gadu-image-name-bo(23149)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2005-3891", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the \"imgcache\\\" string that is added to the end of the buffer."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "15520", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15520/"}, {"name": "21016", "refsource": "OSVDB", "url": "http://www.osvdb.org/21016"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=113261573023912&w=2"}, {"name": "17597", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17597/"}, {"name": "gadu-gadu-image-name-bo(23149)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:24:36.533Z"}, "title": "CVE Program Container", "references": [{"name": "15520", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15520/"}, {"name": "21016", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21016"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=113261573023912&w=2"}, {"name": "17597", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17597/"}, {"name": "gadu-gadu-image-name-bo(23149)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149"}, {"name": "20051121 Gadu-Gadu several vulnerabilities (version <= 7.20)", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3891", "datePublished": "2005-11-29T21:00:00", "dateReserved": "2005-11-29T00:00:00", "dateUpdated": "2024-08-07T23:24:36.533Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:7.20:*:*:*:*:*:*:*", "matchCriteriaId": "669DCBF2-8C36-4AC4-8C45-2E36700645FF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the \"imgcache\\\" string that is added to the end of the buffer."}], "id": "CVE-2005-3891", "lastModified": "2024-11-21T00:02:57.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-29T21:03:00.000", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html"}, {"source": "[email protected]", "url": "http://marc.info/?l=bugtraq&m=113261573023912&w=2"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17597/"}, {"source": "[email protected]", "url": "http://www.osvdb.org/21016"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/15520/"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=113261573023912&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17597/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/21016"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15520/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23149"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{}