CVE:CVE-2005-1852
CNNVD:CNNVD-200507-251
Eksperymentalny Klient Gadu-Gadu(EKG)是一款支持Gadu-Gadu的通信客户端程序。
EKG libgadu中存在多个整数溢出漏洞。攻击者可以利用这个漏洞执行任意代码或拒绝服务。
solution:Upgrade ekg ekg to a higher version than 1.0,1.0_rc2,1.0_rc3,1.1,1.1_rc1,1.1_rc2,1.3,1.4,1.5,1.5_rc1,1.5_rc2,and avoid the version 1.0,1.0_rc2,1.0_rc3,1.1,1.1_rc1,1.1_rc2,1.3,1.4,1.5,1.5_rc1,1.5_rc2; Upgrade kde kde to a higher version than 3.2.3,3.3,3.3.1,3.3.2,3.4,3.4.0,3.4.1,and avoid the version 3.2.3,3.3,3.3.1,3.3.2,3.4,3.4.0,3.4.1; Upgrade centericq centericq to a higher version than *; Upgrade kadu kadu to a higher version than *