Gadu-Gadu 6.0 - File Download Filename Obfuscation



EKU-ID: 29817 CVE: CVE-2004-2530;OSVDB-9162 OSVDB-ID:
Author: Bartosz Kwitkowski Published: 2004-08-23 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/11017/info

Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems.

It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attackers to obfuscate file extensions.

This may allow an attacker to send potentially malicious executable files to users who think that they are downloading files that are believed to be harmless.

file.ext%20(220%20kB)%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20.exe