Unrated severityNVD Advisory· Published Oct 28, 2008· Updated Apr 23, 2026
CVE-2008-4776
CVE-2008-4776
Description
libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read.
Affected products
5cpe:2.3:a:wojtek_kaniewsk:libgadu:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:wojtek_kaniewsk:libgadu:*:*:*:*:*:*:*:*range: <=1.8.1
- cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:wojtek_kaniewsk:libgadu:1.8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.htmlnvd
- lists.ziew.org/pipermail/libgadu-devel/2008-October/000331.htmlnvd
- www.debian.org/security/2008/dsa-1664nvd
- www.securityfocus.com/bid/31951nvd
- www.ubuntu.com/usn/usn-692-1nvd
- bugzilla.redhat.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/46158nvd
News mentions
0No linked articles in our index yet.