CVE:CVE-2005-2370
CNNVD:CNNVD-200507-266
Eksperymentalny Klient Gadu-Gadu(EKG)是一款支持Gadu-Gadu的通信客户端程序。
Ekg的libgadu存在内存队列错误导致的缓冲区溢出漏洞。攻击者通过某种特定结构可以导致拒绝服务。
solution:Upgrade ekg ekg to a higher version than 1.1,1.3,1.4,1.5,1.6_rc1,2005-04-11,2005-06-05,and avoid the version 1.1,1.3,1.4,1.5,1.6_rc1,2005-04-11,2005-06-05; Upgrade rob_flynn gaim to a higher version than 1.4.0,and avoid the version (,1.4.0]