Approved changes feed: RSS · Atom

cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGadu Gadu (ce74fe62-6835-52d3-93ac-727e48ab5fef)
ProductGadu Gadu Instant Messenger (317e4ee3-684a-5958-adf4-501e8ac4d566)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6410 vulnerable 2026-06-08 04:50:08.763892 Details available
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.
Published: 2007-12-17T18:00:00.000Z
Updated: 2024-08-07T16:02:36.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6409 vulnerable 2026-06-08 04:50:08.763541 Details available
The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which allows remote attackers to cause a denial of service (resource consumption) via unspecified network traffic.
Published: 2007-12-17T18:00:00.000Z
Updated: 2024-08-07T16:02:36.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2530 not_vulnerable 2026-06-08 04:48:10.019143 Details available
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.
Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-08T01:29:13.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1233 vulnerable 2026-06-08 04:47:53.385040 Details available
Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet to the DCC file transfer capability with an invalid file length.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1232 vulnerable 2026-06-08 04:47:53.384771 Details available
Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1231 vulnerable 2026-06-08 04:47:53.384510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1230 vulnerable 2026-06-08 04:47:53.384242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1229 vulnerable 2026-06-08 04:47:53.383889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.