What’s Vulnerable › Vulnerabilities

CVE-2005-3891

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-11-29 · updated 2026-06-16

Description

Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the "imgcache\" string that is added to the end of the buffer.

Affected products

• Gadu-Gadu Instant Messenger: 7.20

References

• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html
• http://marc.info/?l=bugtraq&m=113261573023912&w=2
• http://secunia.com/advisories/17597/
• http://www.osvdb.org/21016
• http://www.securityfocus.com/bid/15520/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23149
• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html
• http://marc.info/?l=bugtraq&m=113261573023912&w=2
• http://secunia.com/advisories/17597/
• http://www.osvdb.org/21016
• http://www.securityfocus.com/bid/15520/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23149

Get alerted when CVE-2005-3891 or the next vulnerability affects your stack