Bug 163893 - CAN-2005-1852 Kopete gadu-gadu flaws
Summary: CAN-2005-1852 Kopete gadu-gadu flaws
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: kdenetwork
Version: 4
Hardware: All
OS: Linux
medium
urgent
Target Milestone: ---
Assignee: Than Ngo
QA Contact: Ben Levenson
URL: http://www.kde.org/info/security/advi...
Whiteboard: public=20050721,impact=critical,sourc...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-07-21 20:09 UTC by Josh Bressers
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version: 3.4.1-0
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-08-19 08:44:54 UTC
Type: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Josh Bressers 2005-07-21 20:09:32 UTC 
+++ This bug was initially created as a clone of Bug #163811 +++

"Kopete contains a copy of libgadu that is used if
no compatible version is installed in the system. Several
input validation errors have been reported in libgadu
that can lead to integer overflows and remote DoS or
arbitrary code execution."

Affects: RHEL4 (not RHEL3, not RHEL2.1)
Comment 1 Josh Bressers 2005-07-21 20:10:19 UTC 
This issue also affects FC3
Comment 2 Than Ngo 2005-07-21 21:15:18 UTC 
it's fixed in kdenetwork-3.4.1-0.fc4.2 and  kdenetwork-3.3.1-3.2
Note You need to log in before you can comment on or make changes to this bug.