Gadu-Gadu多个远程输入验证和服务拒绝漏洞

Gadu-Gadu build 155及其以前的版本存在跨站脚本（XSS)漏洞。远程攻击者借助URL注入任意web脚本，该漏洞出现在显示解析错误信息的弹出窗口中，该漏洞不同于CVE – 2004 – 1229。

Reportedly this issue has been resolved in version 6.0 build 156. Users are advised to contact the vendor for more information on obtaining the fixed packages.

来源: BUGTRAQ
名称: 20041217 Gadu-Gadu, another two bugs
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=110330741828726&w=2

来源: BID
名称: 11998
链接:http://www.securityfocus.com/bid/11998

来源: OSVDB
名称: 12524
链接:http://www.osvdb.org/12524

来源: SECUNIA
名称: 13450
链接:http://secunia.com/advisories/13450