What’s Vulnerable › Vulnerabilities

CVE-2005-3888

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-11-29 · updated 2026-06-16

Description

Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped.

Affected products

• Gadu-Gadu Instant Messenger: 7.20

References

• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html
• http://marc.info/?l=bugtraq&m=113261573023912&w=2
• http://secunia.com/advisories/17597/
• http://www.osvdb.org/21017
• http://www.osvdb.org/21018
• http://www.securityfocus.com/bid/15520/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23150
• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html
• http://marc.info/?l=bugtraq&m=113261573023912&w=2
• http://secunia.com/advisories/17597/
• http://www.osvdb.org/21017
• http://www.osvdb.org/21018

Get alerted when CVE-2005-3888 or the next vulnerability affects your stack