CVE-2014-3775

2014-05-2000:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.021

Percentile

89.3%

JSON

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and
other products, allows remote Gadu-Gadu file relay servers to cause a
denial of service (memory overwrite) or possibly execute arbitrary code via
a crafted message.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlibgadu< 1:1.11.1-1ubuntu0.2UNKNOWN
ubuntu13.10noarchlibgadu< 1:1.11.2-1ubuntu1.2UNKNOWN
ubuntu17.10noarchpidgin< 1:2.10.9-0ubuntu4UNKNOWN
ubuntu18.04noarchpidgin< 1:2.10.9-0ubuntu4UNKNOWN
ubuntu18.10noarchpidgin< 1:2.10.9-0ubuntu4UNKNOWN
ubuntu19.04noarchpidgin< 1:2.10.9-0ubuntu4UNKNOWN
ubuntu12.04noarchpidgin< 1:2.10.3-0ubuntu1.5UNKNOWN
ubuntu13.10noarchpidgin< 1:2.10.7-0ubuntu4.1.13.10.2UNKNOWN
ubuntu14.04noarchpidgin< 1:2.10.9-0ubuntu3.1UNKNOWN
ubuntu14.10noarchpidgin< 1:2.10.9-0ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	libgadu	< 1:1.11.1-1ubuntu0.2	UNKNOWN
ubuntu	13.10	noarch	libgadu	< 1:1.11.2-1ubuntu1.2	UNKNOWN
ubuntu	17.10	noarch	pidgin	< 1:2.10.9-0ubuntu4	UNKNOWN
ubuntu	18.04	noarch	pidgin	< 1:2.10.9-0ubuntu4	UNKNOWN
ubuntu	18.10	noarch	pidgin	< 1:2.10.9-0ubuntu4	UNKNOWN
ubuntu	19.04	noarch	pidgin	< 1:2.10.9-0ubuntu4	UNKNOWN
ubuntu	12.04	noarch	pidgin	< 1:2.10.3-0ubuntu1.5	UNKNOWN
ubuntu	13.10	noarch	pidgin	< 1:2.10.7-0ubuntu4.1.13.10.2	UNKNOWN
ubuntu	14.04	noarch	pidgin	< 1:2.10.9-0ubuntu3.1	UNKNOWN
ubuntu	14.10	noarch	pidgin	< 1:2.10.9-0ubuntu4	UNKNOWN