CVE-2005-3887

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image…

published November 29, 2005

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1 port via a filename of "LPT1:".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01887 · 79.2th percentile
Published
2005-11-29T21:00Z
EPSS history
Timeline
  • 29 NOV 21:00Z
    Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image…
    cvelistv5