CVE-2005-1852

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-189

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lwn.net/Articles/144724/Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=112198499417250&w=2
http://secunia.com/advisories/16140Vendor Advisory
http://secunia.com/advisories/16155Vendor Advisory
http://secunia.com/advisories/16211Vendor Advisory
http://secunia.com/advisories/16242Vendor Advisory
http://security.gentoo.org/glsa/glsa-200507-23.xmlPatch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml
http://www.kde.org/info/security/advisory-20050721-1.txtPatch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2005_19_sr.html
http://www.redhat.com/support/errata/RHSA-2005-639.html
http://www.securityfocus.com/bid/14345Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532
http://lwn.net/Articles/144724/Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=112198499417250&w=2
http://secunia.com/advisories/16140Vendor Advisory
http://secunia.com/advisories/16155Vendor Advisory
http://secunia.com/advisories/16211Vendor Advisory
http://secunia.com/advisories/16242Vendor Advisory
http://security.gentoo.org/glsa/glsa-200507-23.xmlPatch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml
http://www.kde.org/info/security/advisory-20050721-1.txtPatch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2005_19_sr.html
http://www.redhat.com/support/errata/RHSA-2005-639.html
http://www.securityfocus.com/bid/14345Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532

Timeline

Published: Jul 26, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-18537.2gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.CVE-2005-18547.5Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary comma CVE-2005-18552.1Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtai CVE-2005-18562.1The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows loc CVE-2005-18577.5Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string speci CVE-2005-18582.1FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a CVE-2005-18597.2Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to e CVE-2005-18645.0PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code CVE-2005-18657.5Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview p CVE-2005-18664.3Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script o CVE-2005-18677.5Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges CVE-2005-18687.5I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php e