CVE-2004-1676 Memory corruption in n/a

High 7.5 Published 20 Feb 2005 Updated 8 Aug 2024

Remote attackers can execute arbitrary code via a crafted image reply message in Gadu-Gadu due to a heap-based buffer overflow.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2004-1676?

CVE-2004-1676 is a high-severity memory corruption vulnerability in n/a, published on 20 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message.

Which versions are affected by CVE-2004-1676?

It affects 1 product.

Products include Gadu-Gadu Gadu-Gadu Instant Messenger.

How do I fix CVE-2004-1676?

No fix has been published for CVE-2004-1676 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2004-1676 being exploited?

There is no known exploitation of CVE-2004-1676 in the wild and no public exploit code.

Sources

Also known as GHSA-hffm-jhvp-jhqx.