CVE-2004-2530

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Gadu-Gadu 6.0 - File Download Filename Obfuscation2004-08-23 · remote · windows · Verified

Impact

Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://seclists.org/lists/vuln-dev/2004/Aug/0007.html
• http://securitytracker.com/id?1011037
• http://www.osvdb.org/9162
• http://www.securityfocus.com/bid/11017
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17105
• http://seclists.org/lists/vuln-dev/2004/Aug/0007.html
• http://securitytracker.com/id?1011037
• http://www.osvdb.org/9162
• http://www.securityfocus.com/bid/11017
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17105