Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
| Software | From | Fixed in |
|---|---|---|
| ekg / ekg | 1.4 | 1.4.x |
| ekg / ekg | 1.1_rc2 | 1.1_rc2.x |
| ekg / ekg | 1.0_rc3 | 1.0_rc3.x |
| ekg / ekg | 1.5_rc2 | 1.5_rc2.x |
| ekg / ekg | 1.5_rc1 | 1.5_rc1.x |
| ekg / ekg | 1.5 | 1.5.x |
| ekg / ekg | 1.1_rc1 | 1.1_rc1.x |
| ekg / ekg | 1.3 | 1.3.x |
| ekg / ekg | 1.0_rc2 | 1.0_rc2.x |
| ekg / ekg | 1.0 | 1.0.x |
| ekg / ekg | 1.1 | 1.1.x |
| kde / kde | 3.3.2 | 3.3.2.x |
| kde / kde | 3.3.1 | 3.3.1.x |
| kde / kde | 3.4.0 | 3.4.0.x |
| kde / kde | 3.4 | 3.4.x |
| kde / kde | 3.3 | 3.3.x |
| kde / kde | 3.2.3 | 3.2.3.x |
| kde / kde | 3.4.1 | 3.4.1.x |
| centericq / centericq | - | - |
| kadu / kadu | - | - |