Kde · Kopete · CVE-2005-1852
**Name of the Vulnerable Software and Affected Versions**
Kopete versions 3.2.3 through 3.4.1
ekg versions prior to 1.6rc3
GNU Gadu (affected versions not specified)
CenterICQ (affected versions not specified)
Kadu (affected versions not specified)
**Description**
The issue is caused by multiple integer overflows in libgadu. This can be exploited by remote attackers via an incoming message, potentially leading to a denial of service (crash) and possibly the execution of arbitrary code.
**Recommendations**
For Kopete versions 3.2.3 through 3.4.1, update to a version outside of this range to resolve the issue.
For ekg versions prior to 1.6rc3, update to version 1.6rc3 or later.
For GNU Gadu, CenterICQ, and Kadu, at the moment, there is no information about a newer version that contains a fix for this issue.