VDB

GCVE-110-MAGEIA-2014-74

GCVE-110-MAGEIA-2014-74
Advisory Published
Vulnetix · Advisory published February 16, 2014
A malicious server or man-in-the-middle could send a large value for Content-Length and cause an integer overflow which could lead to a buffer overflow in Gadu-Gadu HTTP parsing (CVE-2013-6487).

Affected Products

VendorProductVersionsPlatforms
Mageialibgadu0 (affected), 1.11.3-1.mga4 (unaffected), 0 (affected), 1.11.3-1.mga4 (unaffected)—
Mageiaamavisd-new0 (affected), 2.8.2-0.rc1.4.1.mga4 (unaffected)—
Mageialibgadu0 (affected), 1.11.3-1.mga3 (unaffected), 0 (affected), 1.11.3-1.mga3 (unaffected)—
Mageiaspamassassin0 (affected), 3.3.2-13.3.mga3 (unaffected)—
Mageiaamavisd-new0 (affected), 2.8.0-14.3.mga3 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›