Fluid Attacks Database

Description

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 13	libgadu	>=0 <1:1.12.0~rc3-1	1:1.12.0~rc3-1
debian 14	libgadu	>=0 <1:1.12.0~rc3-1	1:1.12.0~rc3-1
debian 12	libgadu	>=0 <1:1.12.0~rc3-1	1:1.12.0~rc3-1
debian 11	libgadu	>=0 <1:1.12.0~rc3-1	1:1.12.0~rc3-1
rpm rhel5	pidgin	-	-
rpm rhel7	libgadu	-	-
rpm rhel6	pidgin	-	-
rpm rhel7	pidgin	-	-

Aliases

1. CVE-2014-37752. NVD-2014-37753. OSV-DEBIAN-2014-37754. OSV-2014-37755. SECURITY-TRACKER-CVE-2014-3775

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.